2008-06-09 12:39:34

by Andrew Morton

[permalink] [raw]
Subject: 2.6.26-rc5-mm1


Temporarily at

http://userweb.kernel.org/~akpm/2.6.26-rc5-mm1/

Will turn up later at

ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.26-rc5/2.6.26-rc5-mm1/


- git-block remains dropped from both -mm and linux-next.

- added the unprivilieged mounts tree as git-unprivileged-mounts.patch
(Miklos Szeredi <[email protected]>)

- There are a large number of deep changes to memory management here:
fast get_user_pages(), lockless pagecache, extensive hugetlb work and,
most radically, basically a rip-up-and-rewrite of page reclaim.

Needless to say: it all needs testing. And review. Thanks.



Boilerplate:

- See the `hot-fixes' directory for any important updates to this patchset.

- To fetch an -mm tree using git, use (for example)

git-fetch git://git.kernel.org/pub/scm/linux/kernel/git/smurf/linux-trees.git tag v2.6.16-rc2-mm1
git-checkout -b local-v2.6.16-rc2-mm1 v2.6.16-rc2-mm1

- -mm kernel commit activity can be reviewed by subscribing to the
mm-commits mailing list.

echo "subscribe mm-commits" | mail [email protected]

- If you hit a bug in -mm and it is not obvious which patch caused it, it is
most valuable if you can perform a bisection search to identify which patch
introduced the bug. Instructions for this process are at

http://www.zip.com.au/~akpm/linux/patches/stuff/bisecting-mm-trees.txt

But beware that this process takes some time (around ten rebuilds and
reboots), so consider reporting the bug first and if we cannot immediately
identify the faulty patch, then perform the bisection search.

- When reporting bugs, please try to Cc: the relevant maintainer and mailing
list on any email.

- When reporting bugs in this kernel via email, please also rewrite the
email Subject: in some manner to reflect the nature of the bug. Some
developers filter by Subject: when looking for messages to read.

- Occasional snapshots of the -mm lineup are uploaded to
ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/mm/ and are announced on
the mm-commits list. These probably are at least compilable.

- More-than-daily -mm snapshots may be found at
http://userweb.kernel.org/~akpm/mmotm/. These are almost certainly not
compileable.



Changes since 2.6.26-rc2-mm1:


origin.patch
linux-next.patch
git-jg-misc.patch
git-leds.patch
git-libata-all.patch
git-battery.patch
git-parisc.patch
git-regulator.patch
git-unionfs.patch
git-logfs.patch
git-unprivileged-mounts.patch
git-xtensa.patch
git-orion.patch
git-pekka.patch

git trees

-mpc5200_psc_spi-typo-fix-in-header-block.patch
-m68knommu-add-info-about-removing-mcfserial.patch
-oprofile-dont-request-cache-line-alignment-for-cpu_buffer.patch
-fix-lxfb-extend-pll-table-to-support-dotclocks-below-25-mhz.patch
-revert-acpica-fixes-for-unload-and-ddbhandles.patch
-acpi_pm_device_sleep_state-cleanup.patch
-acpi-acpi_numa_init-build-fix.patch
-acpi-fix-drivers-acpi-gluec-build-error.patch
-arch-x86-mm-patc-use-boot_cpu_has.patch
-x86-setup_force_cpu_cap-dont-do-clear_bitnon-unsigned-long.patch
-x86-set_restore_sigmask-avoid-bitop-on-a-u32.patch
-x86-early_init_centaur-use-set_cpu_cap.patch
-x86-bitops-take-an-unsigned-long.patch
-list_for_each_rcu-must-die-audit.patch
-audit_send_reply-fix-error-path-memory-leak.patch
-bkl-removal-convert-cifs-over-to-unlocked_ioctl.patch
-cifs-suppress-warning.patch
-powerpc-add-i2c-pins-to-dts-and-board-setup.patch
-macintosh-replace-deprecated-__initcall-with-device_initcall.patch
-struct-class-sem-to-mutex-converting.patch
-driver-core-struct-class-remove-children-list.patch
-drm-radeon-radeon_enable_vblank-should-return-negative-error.patch
-media-use-get_unaligned_-helpers.patch
-zoran-use-correct-type-for-cpu-flags.patch
-i2c-use-class_for_each_device.patch
-i2c-add-support-for-i2c-bus-on-freescale-cpm1-cpm2-controllers.patch
-hdaps-invert-the-axes-for-hdaps-on-lenovo-r61i-thinkpads.patch
-i5k_amb-support-intel-5400-chipset.patch
-ibmaem-new-driver-for-power-energy-temp-meters-in-ibm-system-x-hardware.patch
-ibmaem-fix-64-bit-division-on-32-bit-platforms.patch
-ibmaem-overview-of-the-driver.patch
-ibmaem-new-driver-for-power-energy-temp-meters-in-ibm-system-x-hardware-ia64-warnings.patch
-hid-use-get-put_unaligned_-helpers.patch
-drivers-infiniband-hw-mlx4-qpc-fix-uninitialised-var-warning.patch
-jfs-switch-to-seq_files.patch
-leds-add-pca9532-led-driver.patch
-leds-add-pca9532-platform-data-for-thecus-n2100.patch
-ata-remove-fit-macro.patch
-multi-statement-if-seems-to-be-missing-braces.patch
-sctp-fix-use-of-uninitialized-pointer.patch
-iphase-fix-64bit-warning.patch
-list_for_each_rcu-must-die-networking.patch
-net-hso-driver-uses-rfkill-functions.patch
-linux-atm_tcph-linux-atmh-cleanup-for-userspace.patch
-hysdn-remove-cli-sti-calls.patch
-hysdn-no-longer-broken-on-smp.patch
-gigaset-use-dev_-macros-for-messages.patch
-gigaset-gigaset_isowbuf_getbytes-may-return-signed-unnoticed.patch
-isdn-capi-return-proper-errnos-on-module-init.patch
-ehca-ret-is-unsigned-ibmebus_request_irq-negative-return-ignored-in-hca_create_eq.patch
-dm9000-use-delayed-work-to-update-mii-phy-state-fix.patch
-pcnet32-fix-warning.patch
-drivers-net-tokenring-3c359c-squish-a-warning.patch
-drivers-net-tokenring-olympicc-fix-warning.patch
-rndis_host-increase-delay-in-command-response-loop.patch
-net-s2io-set_rxd_buffer_pointer-returns-enomem-not-enomem.patch
-power_supply-add-charge_counter-property-and-olpc_battery-support-for-it-fix.patch
-fs-nfs-callback_xdrc-suppress-uninitialiized-variable-warnings.patch
-nfs-lsm-make-nfsv4-set-lsm-mount-options.patch
-nfs-replace-remaining-__function__-occurrences.patch
-nfs-path_getput-cleanups.patch
-nfs-make-nfs4_drop_state_owner-static.patch
-ntfs-le_add_cpu-conversion.patch
-parisc-new-termios-definitions.patch
-parisc-replace-remaining-__function__-occurences.patch
-drivers-parisc-replace-remaining-__function__-occurrences.patch
-parisc-remove-redundant-display-of-free-swap-space-in-show_mem.patch
-arch-parisc-kernel-unalignedc-use-time_-macros.patch
-pci-hotplug-mm-pciehp-fix-typo-in-dbg_ctrl.patch
-pci-hotplug-mm-pciehp-remove-null-status-register-write.patch
-pci-hotplug-construct-one-fakephp-slot-per-pci-slot.patch
-pci-hotplug-export-kobject_rename-for-pci_hotplug_core.patch
-pci-hotplug-introduce-pci_slot.patch
-pci-hotplug-acpi-pci-slot-detection-driver.patch
-s390-char-vmlogrdr-module-initialization-function-should-return-negative-errors.patch
-mutex-debug-check-mutex-magic-before-owner.patch
-show_schedstat-fix-memleak.patch
-rcu-remove-duplicated-include-in-kernel-rcupreemptc.patch
-rcu-remove-duplicated-include-in-kernel-rcupreempt_tracec.patch
-scsi-use-get_unaligned_-helpers.patch
-fix-gregkh-usb-usb-ohci-host-controller-resumes-leave-root-hub-suspended.patch
-uwb-fix-all-printk-format-warnings.patch
-drivers-uwb-nehc-processor-flags-have-type-unsigned-long.patch
-uwb-fix-scscanf-warning.patch
-drivers-uwb-i1480-dfu-macc-fix-min-warning.patch
-drivers-uwb-i1480-dfu-usbc-fix-size_t-confusion.patch
-drivers-uwb-whcic-needs-dma-mappingh.patch
-usb-usbtest-comment-on-why-this-code-expects-negative-and-positive-errnos.patch
-rndis-switch-to-seq_files.patch
-rndis-switch-to-seq_files-checkpatch-fixes.patch
-net-usb-add-support-for-apple-usb-ethernet-adapter.patch
-itco_wdt-ich9do-support.patch
-watchdog-fix-booke_wdtc-on-mpc85xx-smp-system.patch
-wireless-fix-iwlwifi-unify-init-driver-flow.patch
-mac80211-michaelc-use-kernel-provided-infrastructure.patch
-mac80211-introduce-struct-michael_mic_ctx-and-static-helpers.patch
-mac80211-tkipc-use-kernel-provided-infrastructure.patch
-mac80211-add-const-remove-unused-function-make-one-function-static.patch
-mac80211-add-a-struct-to-hold-tkip-context.patch
-mac80211-tkipc-use-struct-tkip_ctx-in-phase-1-key-mixing.patch
-mac80211-tkipc-use-struct-tkip_ctx-in-phase-2-key-mixing.patch
-b43-replace-limit_value-macro-with-clamp_val.patch
-b43legacy-replace-limit_value-macro-with-clamp_val.patch
-wireless-use-get-put_unaligned_-helpers.patch
-b43-use-the-bitrev-helpers-rather-than-rolling-a-private-one.patch
-xfs-suppress-uninitialized-var-warnings.patch
-module-loading-elf-handling-use-selfmag-instead-of-numeric-constant.patch
-pnp-cleanup-pnp_fixup_device.patch
-pnp-add-pnp_build_option-to-the-api.patch
-pnp-add-isapnp-mpu-option-quirks.patch
-mm-fix-infinite-loop-in-filemap_fault.patch
-atmel_lcdfb-fix-initialization-of-a-pre-allocated-framebuffer.patch
-ipmi-support-i-o-resources-in-of-driver.patch
-memory-hotplug-memmap_init_zone-called-twice.patch
-jbd-need-to-hold-j_state_lock-to-updates-to-transaction-t_state-to-t_commit.patch
-asm-alphah8300umv850xtensa-paramh-unbreak-hz-for-userspace.patch
-cgroups-fix-compile-warning.patch
-ext3-4-fix-uninitialized-bs-in-ext3-4_xattr_set_handle.patch
-video-logo-add-support-for-blackfin-linux-logo-for-framebuffer-console.patch
-lib-create-common-ascii-hex-array.patch
-memory_hotplug-check-for-walk_memory_resource-failure-in-online_pages.patch
-per_cpu-fix-define_per_cpu_shared_aligned-for-modules.patch
-per_cpu-fix-define_per_cpu_shared_aligned-for-modules-fix.patch
-mprotect-prevent-alteration-of-the-pat-bits.patch
-mprotect-prevent-alteration-of-the-pat-bits-checkpatch-fixes.patch
-memory_hotplug-always-initialize-pageblock-bitmap.patch
-char-select-fw_loader-by-moxa.patch
-remove-blkdev-warning-triggered-by-using-md.patch
-tty_check_change-avoid-taking-tasklist_lock-while-holding-tty-ctrl_lock.patch
-colibri-fix-support-for-dm9000-ethernet-device.patch
-colibri-fix-support-for-dm9000-ethernet-device-fix.patch
-cpufreq-fix-null-object-access-on-transmeta-cpu.patch
-cpufreq-arusoe-longrun-cpufreq-module-reports-false-min-freq.patch
-mmc-fix-omap-compile-by-replacing-dev_name-with-dma_dev_name.patch
-ntp-make-the-rtc-sync-mode-11-minute-again.patch
-hostap-procfs-fix-for-hostap_fwc.patch
-mm-allow-pfnmap-faults.patch
-pcmcia-kill-in_card_services.patch
-pcmcia-pccard-deadlock-fix.patch
-accounting-account-for-user-time-when-updating-memory-integrals.patch
-update-checkpatchpl-to-version-019.patch
-update-checkpatchpl-to-version-019-fix.patch
-zorro-replace-deprecated-__initcall-with-equivalent-device_initcall.patch
-xen-drivers-xen-balloonc-make-a-function-static.patch
-video-fix-integer-as-null-pointer-warnings.patch
-documentation-build-source-files-in-documentation-sub-dir.patch
-documentation-build-source-files-in-documentation-sub-dir-disable.patch
-fs-ext4-use-bug_on.patch
-ext4-fix-mount-messages-when-quota-disabled.patch
-ext4-fix-synchronization-of-quota-files-in-journal=data-mode.patch
-ext4-fix-typos-in-messages-and-comments-journalled-journaled.patch
-ext4-correct-mount-option-parsing-to-detect-when-quota-options-can-be-changed.patch
-ext4-switch-to-seq_files.patch
-jbd2-need-to-hold-j_state_lock-during-updates-to-transaction-t_state.patch
-kgdb-use-the-common-ascii-hex-helpers.patch
-mn10300-use-the-common-ascii-hex-helpers.patch
-sh-use-the-common-ascii-hex-helpers.patch
-make-struct-mpt_proc_root_dir-static.patch
-aacraid-linitc-make-aac_show_serial_number-static.patch

Merged into mainline or a subsystem tree

+agp-add-support-for-radeon-mobility-9000-chipset.patch
+mm-fix-incorrect-variable-type-in-do_try_to_free_pages.patch
+fat-relax-the-permission-check-of-fat_setattr.patch
+m68k-add-ext2_find_firstnext_bit-for-ext4.patch
+m68k-add-ext2_find_firstnext_bit-for-ext4-checkpatch-fixes.patch
+hgafb-resource-management-fix.patch
+isight_firmware-avoid-crash-on-loading-invalid-firmware.patch

2.6.26 queue

-linux-next-git-rejects.patch
-revert-9p-convert-from-semaphore-to-spinlock.patch
-ia64-kvm-dont-delete-files-which-we-need.patch

Unneeded

+linux-next-git-rejects.patch
+drivers-net-wireless-iwlwifi-iwl-4965-rsc-config_iwl4965_ht=n-hack.patch
+fix-x86_64-splat.patch
+kvm-unbork.patch
+kvm-is-busted-on-ia64.patch

Various linux-next fixes

+add-have_clk-to-kconfig-for-driver-dependencies.patch

Maybe 2.6.26.

+bay-exit-if-notify-handler-cannot-be-installed.patch
+dockc-remove-trailing-printk-whitespace.patch
+acpi-use-memory_read_from_buffer.patch

ACPI things

+x86-remove-unused-variable-loops-in-arch-x86-boot-a20c.patch
+x86-fix-longstanding-setupc-printk-format-warning.patch

x86 things

+ac97-add-support-for-wm9711-master-left-inv-switch.patch

alsa device support

+agp-add-a-missing-via-agp-module-alias.patch
+intel-agp-rewrite-gtt-on-resume.patch
+intel-agp-rewrite-gtt-on-resume-update.patch
+intel-agp-rewrite-gtt-on-resume-update-checkpatch-fixes.patch

AGP things

-arm-omap1-n770-convert-audio_pwr_sem-in-a-mutex-fix.patch

Folded into arm-omap1-n770-convert-audio_pwr_sem-in-a-mutex.patch

+remove-drivers-acorn-char-defkeymap-l7200c.patch
+arm-fix-header-guards.patch

arm things

+kernel-auditc-nlh-nlmsg_type-is-gotten-more-than-once.patch
+audit-remove-useless-argument-type-in-audit_filter_user.patch

audit things

+cifs-primitive-is-not-an-asn1-class.patch

CIFS fix

+cm4000_cs-switch-to-unlocked_ioctl.patch
+pcmcia-add-support-the-cf-pcmcia-driver-for-blackfin-try-2.patch
+pcmcia-pccard-deadlock-fix.patch

PCMCIA things

+macintosh-therm_windtunnel-semaphore-to-mutex.patch
+macintosh-media-bay-semaphore-to-mutex.patch
+arch-powerpc-platforms-pseries-eeh_driverc-fix-warning.patch
+arch-powerpc-platforms-pseries-eeh_driverc-fix-warning-checkpatch-fixes.patch

powerpc things

+dev_set_name-fix-missing-kernel-doc.patch

driver tree things

+drm-remove-defines-for-non-linux-systems.patch

DRM cleanup

+ttusb-use-simple_read_from_buffer.patch

v4l fix

+hrtimer-remove-unused-variables-in-ktime_divns.patch
+ntp-let-update_persistent_clock-sleep.patch

timer things

+input-i8042-add-dritek-quirk-for-acer-travelmate-660.patch
+input-add-switch-for-dock-events.patch

input things

-git-kbuild-fixes.patch

Unneeded

+kbuild-remove-final-references-to-deprecated-unreferenced-topdir.patch
+kbuild-move-non-__kernel__-checking-headers-to-header-y.patch
+documentation-build-source-files-in-documentation-sub-dir.patch
+documentation-build-source-files-in-documentation-sub-dir-disable.patch

kbuild things

+leds-add-support-for-philips-pca955x-i2c-led-drivers.patch

Leds fix

+mips-remove-board_watchpoint_handler.patch

MIPS fix

-mmc-sd-host-driver-for-ricoh-bay1controllers-fix.patch
-mmc-sd-host-driver-for-ricoh-bay1controllers-fix-2.patch

Folded into mmc-sd-host-driver-for-ricoh-bay1controllers.patch

+mtd-mtdcharc-silence-sparse-warning.patch
+mtd-mtdcharc-remove-shadowed-variable-warnings.patch
+drivers-mtd-devices-block2mtdc-suppress-warning.patch

MTD fixes

-git-net-git-rejects.patch

Unneeded

+drivers-atm-enih-remove-unused-macro-kernel_offset.patch

net fix

+bluetooth-hci_bcspc-small-cleanups-api-users.patch
+bluetooth-hci_bcspc-small-cleanups-api-users-fix.patch

bluetooth

+isdn-divas-fix-proc-creation.patch
+isdn-use-simple_read_from_buffer.patch

ISDN things

+ipg-fix-receivemode-ipg_rm_receivemulticasthash-in-ipg_nic_set_multicast_list.patch
+fec_mpc52xx-mpc52xx_messages_default-2nd-netif_msg_ifdown-=-ifup.patch
+smc911x-remove-unused-8-bit-i-o-operations.patch
+smc911x-fix-16-bit-i-o-operations.patch
+smc911x-pass-along-private-data-and-use-iomem.patch
+smc911x-introduce-platform-data-flags.patch
+smc911x-superh-architecture-support.patch
+net-sh_eth-add-support-for-renesas-superh-ethernet.patch
+net-sh_eth-add-support-for-renesas-superh-ethernet-checkpatch-fixes.patch
+macb-use-random-mac-if-stored-address-in-eeprom-is-invalid.patch
+smc-ultra-get-rid-of-eth%d-message.patch

netdev

+ocfs2-use-simple_read_from_buffer.patch

ocfs2 cleanup

+parisc-fix-incomplete-header-guard.patch

parisc fixlet

-selinux-dopey-hack.patch

Unneeded

+fakephp-construct-one-fakephp-slot-per-pci-slot.patch
+pci-introduce-pci_slot.patch
+acpi-pci-slot-detection-driver.patch
+acpi-pci-slot-detection-driver-fix.patch

PCI things

+s390-vmcp-use-simple_read_from_buffer.patch
+s390-use-simple_read_from_buffer.patch
+s390-cio-use-memory_read_from_buffer.patch
+s390-use-memory_read_from_buffer.patch

s390 cleanups

+sched-sched_clock-lockdep-fix.patch

fix lockdep glitch

+rcu-remove-unused-field-struct-rcu_data-rcu_tasklet.patch
+netfilter-conntrack_helper-needs-to-include-rculisth.patch

RCU things

+git-scsi-misc-fix-scsi_dh-build-errors.patch

Fix git-scsi-misc

+paride-push-ioctl-down-into-driver.patch
+pktcdvd-push-bkl-down-into-driver.patch
+pktcdvd-push-bkl-down-into-driver-fix.patch
+dac960-push-down-bkl.patch
+ipr-use-memory_read_from_buffer.patch
+qla2xxx-use-memory_read_from_buffer.patch
+block-add-blk_queue_update_dma_pad.patch
+ide-use-the-dma-safe-check-for-req_type_ata_pc.patch
+block-blk_rq_map_kern-uses-the-bounce-buffers-for-stack-buffers.patch
+ide-avoid-dma-on-the-stack-for-req_type_ata_pc.patch
+scsi-sr-avoids-useless-buffer-allocation.patch
+cdrom-revert-commit-22a9189-cdrom-use-kmalloced-buffers-instead-of-buffers-on-stack.patch

block things

-unionfs-broke.patch

Unneeded

+accessrunner-avoid-unnecessary-memset.patch
+usb-host-use-get-put_unaligned_-helpers-to-fix-more-potential-unaligned-issues.patch
+usb-host-use-get-put_unaligned_-helpers-to-fix-more-potential-unaligned-issues-fix.patch
+usb-host-use-get-put_unaligned_-helpers-to-fix-more-potential-unaligned-issues-fix-2.patch
+usb-cp2101c-fix-sparse-signedness-mismatch-warnings.patch
+usb-speedtchc-fix-sparse-shadowed-variable-warning.patch
+usbmon-use-simple_read_from_buffer.patch
+usb-digi_accelportc-trivial-sparse-lock-annotation.patch

USB things

-revert-git-v9fs.patch

Unneeded

-git-watchdog-git-rejects.patch

Unneeded

+vfs-fix-err_ptr-abuse-in-generic_readlink.patch
+flock-remove-unused-fields-from-file_lock_operations.patch

VFS things

+git-unprivileged-mounts.patch


+at91sam9-cap9-watchdog-driver.patch
+watchdog-clean-acquirewdt-and-check-for-bkl-dependancies.patch
+watchdog-clean-up-and-check-advantech-watchdog.patch
+watchdog-ali-watchdog-locking-and-style.patch
+watchdog-ar7-watchdog.patch
+watchdog-atp-watchdog.patch
+watchdog-at91-watchdog-to-unlocked_ioctl.patch
+watchdog-cpu5_wdt-switch-to-unlocked_ioctl.patch
+watchdog-davinci_wdt-unlocked_ioctl-and-check-locking.patch
+watchdog-ep93xx_wdt-unlocked_ioctl.patch
+watchdog-eurotechwdt-unlocked_ioctl-code-lock-check-and-tidy.patch
+watchdog-hpwdt-couple-of-include-cleanups.patch
+watchdog-ib700wdt-clean-up-and-switch-to-unlocked_ioctl.patch
+watchdog-i6300esb-style-unlocked_ioctl-cleanup.patch
+watchdog-ibmasr-coding-style-locking-verify.patch
+watchdog-indydog-clean-up-and-tidy.patch
+watchdog-iop-watchdog-switch-to-unlocked_ioctl.patch
+watchdog-it8712f-unlocked_ioctl.patch
+watchdog-bfin-watchdog-cleanup-and-unlocked_ioctl.patch
+watchdog-ixp2000_wdt-clean-up-and-unlocked_ioctl.patch
+watchdog-ixp4xx_wdt-unlocked_ioctl.patch
+watchdog-ks8695_wdt-clean-up-coding-style-unlocked_ioctl.patch
+watchdog-machzwd-clean-up-coding-style-unlocked_ioctl.patch
+watchdog-mixcomwd-coding-style-locking-unlocked_ioctl.patch
+watchdog-mpc-watchdog-clean-up-and-locking.patch
+watchdog-mpcore-watchdog-unlocked_ioctl-and-bkl-work.patch
+watchdog-mtx-1_wdt-clean-up-coding-style-unlocked-ioctl.patch
+watchdog-mv64x60_wdt-clean-up-and-locking-checks.patch
+watchdog-omap_wdt-locking-unlocked_ioctl-tidy.patch
+watchdog-pc87413_wdt-clean-up-coding-style-unlocked_ioctl.patch
+watchdog-pcwd-clean-up-unlocked_ioctl-usage.patch
+watchdog-pcwd-clean-up-unlocked_ioctl-usage-fix.patch
+watchdog-pnx4008_wdt-unlocked_ioctl-setup.patch
+watchdog-rm9k_wdt-clean-up.patch
+watchdog-s3c2410-watchdog-cleanup-and-switch-to-unlocked_ioctl.patch
+watchdog-sa1100_wdt-switch-to-unlocked_ioctl.patch
+watchdog-sbc60xxwdt-clean-up-and-switch-to-unlocked_ioctl.patch
+watchdog-stg7240_wdt-unlocked_ioctl.patch
+watchdog-sbc8360-clean-up.patch
+watchdog-sbc_epx_c3_wdt-switch-to-unlocked_ioctl.patch
+watchdog-sb_wdog-clean-up-and-switch-to-unlocked_ioctl.patch
+watchdog-sc1200_wdt-clean-up-fix-locking-and-use-unlocked_ioctl.patch
+watchdog-sc520_wdt-clean-up-and-switch-to-unlocked_ioctl.patch
+watchdog-scx200_wdt-clean-up-and-switch-to-unlocked_ioctl.patch
+watchdog-shwdt-coding-style-cleanup-switch-to-unlocked_ioctl.patch
+watchdog-smsc37b787_wdt-coding-style-switch-to-unlocked_ioctl.patch
+watchdog-softdog-clean-up-coding-style-and-switch-to-unlocked_ioctl.patch
+watchdog-txx9-fix-locking-switch-to-unlocked_ioctl.patch
+watchdog-w83627hf-coding-style-clean-up-and-switch-to-unlocked_ioctl.patch
+watchdog-w83877f_wdt-clean-up-code-coding-style-switch-to-unlocked_ioctl.patch
+watchdog-w83977f_wdt-clean-up-coding-style-and-switch-to-unlocked_ioctl.patch
+watchdog-wafer5823wdt-clean-up-coding-style-switch-to-unlocked_ioctl.patch
+watchdog-wdrtas-clean-up-coding-style-switch-to-unlocked_ioctl.patch
+watchdog-wdt285-switch-to-unlocked_ioctl-and-tidy-up-oddments-of-coding-style.patch
+watchdog-wdt977-clean-up-coding-style-and-switch-to-unlocked_ioctl.patch
+watchdog-wdt501-pci-clean-up-coding-style-and-switch-to-unlocked_ioctl.patch
+watchdog-wdt501-pci-clean-up-coding-style-and-switch-to-unlocked_ioctl-fix.patch
+pcwd-a-couple-of-watchdogs-escaped-conversion.patch
+mpc83xx_wdt-convert-to-the-of-platform-driver.patch
+mpc83xx_wdt-add-support-for-mpc86xx-cpus.patch
+mpc83xx_wdt-rename-to-mpc8xxx_wdt.patch
+mpc8xxx_wdt-various-renames-mostly-s-mpc83xx-mpc8xxx-g.patch
+mpc8xxx_wdt-add-support-for-mpc8xx-watchdogs.patch
+powerpc-fsl_soc-remove-mpc83xx_wdt-code.patch
+powerpc-86xx-mpc8610_hpcd-add-watchdog-node.patch

A few watchdog patches I picked up.

+airo-use-simple_read_from_buffer.patch

wireless cleanup

-git-orion-git-rejects.patch

Unneeded

-ext4-is-busted-on-m68k.patch

It got unbusted

+maintainers-update-maintainership-of-pxa2xx-pxa3xx.patch
+#provide-rtc_cmos-platform-device-take-2.patch: david-b wibbling
+provide-rtc_cmos-platform-device-take-2.patch
+provide-rtc_cmos-platform-device-take-2-fix.patch
+rtc-make-hpet_rtc_irq-track-hpet_emulate_rtc.patch
+rtc-ramtron-fm3130-rtc-support.patch
+fat_valid_media-isnt-for-userspace.patch
+mmc-wbsd-initialize-tasklets-before-requesting-interrupt.patch

More 2.6.26 queue

+acpi-fix-drivers-acpi-gluec-build-error.patch
+spi-fix-list-scan-success-verification-in-pxa-ssp-driver.patch
+nand-flash-fix-timings-for-at91sam9x-evaluation-kits.patch
+audit-fix-kernel-doc-parameter-notation.patch
+cifs-fix-oops-on-mount-when-config_cifs_dfs_upcall-is-enabled.patch
+dm-crypt-add-cond_resched-to-crypt_convert.patch
+ext4-fix-online-resize-bug.patch
+mtd-m25p80-fix-bug-atmel-spi-flash-fails-to-be-copied-to.patch
+mtd-m25p80-fix-bug-atmel-spi-flash-fails-to-be-copied-to-fix-up.patch
+gigaset-fix-module-reference-counting.patch
+drivers-isdn-sc-ioctlc-add-missing-kfree.patch
+forcedeth-msi-interrupts.patch
+pnpacpi-fix-irq-flag-decoding.patch
+pnpacpi-fix-irq-flag-decoding-comment-fix.patch
+pnpacpi-fix-shareable-irq-encode-decode.patch
+pnpacpi-use-_crs-irq-descriptor-length-for-_srs-v2.patch
+ftrace-disable-function-tracing-bringing-up-new-cpu.patch
+sched-fix-memory-leak-in-the-cpu-hotplug-handing-logic.patch
+sched-cpu-hotplug-events-must-not-destroy-scheduler-domains-created-by-the-cpusets.patch
+sched-fix-task_wakekill-vs-sigkill-race.patch
+__mutex_lock_common-use-signal_pending_state.patch
+do_generic_file_read-s-eintr-eio-if-lock_page_killable-fails.patch
+vfs-utimensat-ignore-tv_sec-if-tv_nsec-==-utime_omit-or-utime_now.patch
+vfs-utimensat-be-consistent-with-utime-for-immutable-and-append-only-files.patch
+vfs-utimensat-fix-error-checking-for-utime_nowutime_omit-case.patch
+vfs-utimensat-fix-error-checking-for-utime_nowutime_omit-case-cleanup.patch
+vfs-utimensat-fix-write-access-check-for-futimens.patch

Patches which I think should be in 2.6.26 but which go vie subsystem trees.

+x86-fix-lockdep-warning-during-suspend-to-ram.patch

Fix interrupt annotation

+access_process_vm-device-memory-infrastructure.patch
+access_process_vm-device-memory-infrastructure-fix.patch
+use-generic_access_phys-for-dev-mem-mappings.patch
+use-generic_access_phys-for-dev-mem-mappings-fix.patch
+use-generic_access_phys-for-pci-mmap-on-x86.patch
+powerpc-ioremap_prot.patch
+spufs-use-the-new-vm_ops-access.patch
+spufs-use-the-new-vm_ops-access-fix.patch
+mm-remove-double-indirection-on-tlb-parameter-to-free_pgd_range-co.patch
+buddy-clarify-comments-describing-buddy-merge.patch
+fix-soft-lock-up-at-nfs-mount-by-per-sb-lru-list-of-unused-dentries.patch
+fix-soft-lock-up-at-nfs-mount-by-per-sb-lru-list-of-unused-dentries-fix.patch
+page-flags-record-page-flag-overlays-explicitly.patch
+page-flags-record-page-flag-overlays-explicitly-xen.patch
+slub-record-page-flag-overlays-explicitly.patch
+slob-record-page-flag-overlays-explicitly.patch
+mapping_set_error-add-unlikely.patch
+mm-drop-unneeded-pgdat-argument-from-free_area_init_node.patch
+vfs-pagecache-usage-optimization-onpagesize=blocksize-environment.patch
+hugetlb-move-hugetlb_acct_memory.patch
+hugetlb-reserve-huge-pages-for-reliable-map_private-hugetlbfs-mappings-until-fork.patch
+hugetlb-guarantee-that-cow-faults-for-a-process-that-called-mmapmap_private-on-hugetlbfs-will-succeed.patch
+hugetlb-guarantee-that-cow-faults-for-a-process-that-called-mmapmap_private-on-hugetlbfs-will-succeed-fix.patch
+hugetlb-guarantee-that-cow-faults-for-a-process-that-called-mmapmap_private-on-hugetlbfs-will-succeed-build-fix.patch
+huge-page-private-reservation-review-cleanups.patch
+huge-page-private-reservation-review-cleanups-fix.patch
+mm-record-map_noreserve-status-on-vmas-and-fix-small-page-mprotect-reservations.patch
+hugetlb-move-reservation-region-support-earlier.patch
+hugetlb-allow-huge-page-mappings-to-be-created-without-reservations.patch
+hugetlb-allow-huge-page-mappings-to-be-created-without-reservations-cleanups.patch
+generic_file_aio_read-cleanups.patch
+tmpfs-support-aio.patch
+sync_file_range_write-may-and-will-block-document-that.patch
+sync_file_range_write-may-and-will-block-document-that-fix.patch
+vmallocinfo-add-numa-information.patch
+vmallocinfo-add-numa-information-fix.patch
+hugetlb-factor-out-prep_new_huge_page.patch
+hugetlb-modular-state-for-hugetlb-page-size.patch
+hugetlb-modular-state-for-hugetlb-page-size-checkpatch-fixes.patch
+hugetlb-multiple-hstates-for-multiple-page-sizes.patch
+hugetlb-multiple-hstates-for-multiple-page-sizes-checkpatch-fixes.patch
+hugetlbfs-per-mount-huge-page-sizes.patch
+hugetlb-new-sysfs-interface.patch
+hugetlb-abstract-numa-round-robin-selection.patch
+mm-introduce-non-panic-alloc_bootmem.patch
+mm-export-prep_compound_page-to-mm.patch
+hugetlb-support-larger-than-max_order.patch
+hugetlb-support-boot-allocate-different-sizes.patch
+hugetlb-printk-cleanup.patch
+hugetlb-introduce-pud_huge.patch
+x86-support-gb-hugepages-on-64-bit.patch
+x86-add-hugepagesz-option-on-64-bit.patch
+hugetlb-override-default-huge-page-size.patch
+hugetlb-override-default-huge-page-size-ia64-build.patch
+hugetlb-allow-arch-overried-hugepage-allocation.patch
+powerpc-function-to-allocate-gigantic-hugepages.patch
+powerpc-scan-device-tree-for-gigantic-pages.patch
+powerpc-define-support-for-16g-hugepages.patch
+fs-check-for-statfs-overflow.patch
+powerpc-support-multiple-hugepage-sizes.patch
+bootmem-reorder-code-to-match-new-bootmem-structure.patch
+bootmem-clean-up-bootmemc-file-header.patch
+bootmem-add-documentation-to-api-functions.patch
+bootmem-add-debugging-framework.patch
+bootmem-add-debugging-framework-fix.patch
+bootmem-revisit-bitmap-size-calculations.patch
+bootmem-revisit-bootmem-descriptor-list-handling.patch
+bootmem-clean-up-free_all_bootmem_core.patch
+bootmem-clean-up-free_all_bootmem_core-fix.patch
+bootmem-clean-up-alloc_bootmem_core.patch
+bootmem-free-reserve-helpers.patch
+bootmem-free-reserve-helpers-fix.patch
+bootmem-factor-out-the-marking-of-a-pfn-range.patch
+bootmem-factor-out-the-marking-of-a-pfn-range-fix.patch
+bootmem-respect-goal-more-likely.patch
+bootmem-make-__alloc_bootmem_low_node-fall-back-to-other-nodes.patch
+bootmem-revisit-alloc_bootmem_section.patch
+bootmem-replace-node_boot_start-in-struct-bootmem_data.patch

Memory management updates

+security-protect-legacy-apps-from-insufficient-privilege.patch
+security-protect-legacy-apps-from-insufficient-privilege-cleanup.patch

Security things

+gigaset-use-dev_-macros-for-messages.patch
+gigaset-gigaset_isowbuf_getbytes-may-return-signed-unnoticed.patch

gigaset driver updates

+snapshot-push-bkl-down-into-ioctl-handlers.patch
+swsusp-provide-users-with-a-hint-about-the-no_console_suspend-option.patch
+swsusp-provide-users-with-a-hint-about-the-no_console_suspend-option-fix.patch
+pm-boot-time-suspend-selftest.patch
+remove-include-linux-pm_legacyh.patch

power management

+cris-remove-unused-global_flush_tlb.patch
+cris-use-simple_read_from_buffer.patch

cris updates

+list_for_each_rcu-must-die-networking.patch
+#percpu-introduce-define_per_cpu_page_aligned.patch: Rusty queries
+percpu-introduce-define_per_cpu_page_aligned.patch
+remove-argument-from-open_softirq-which-is-always-null.patch
+lib-taint-kernel-in-common-report_bug-warn-path.patch
+build-kernel-profileo-only-when-requested.patch
+build-kernel-profileo-only-when-requested-cleanups.patch
+asm-generic-int-ll64h-always-provide-__su64.patch
+remove-some-more-tipar-bits.patch
+call_usermodehelper-increase-reliability.patch
+fs-partition-checkc-fix-return-value-warning.patch
+fs-partition-checkc-fix-return-value-warning-v2-cleanup.patch
+block-ioctlc-and-fs-partition-checkc.patch
+block-ioctlc-and-fs-partition-checkc-checkpatch-fixes.patch
+misc-add-hp-wmi-laptop-extras-driver.patch
+clean-up-duplicated-alloc-free_thread_info.patch

Misc

+remove-the-oss-trident-driver.patch
+remove-the-oss-trident-driver-fix.patch
+config_sound_wm97xx-remove-stale-makefile-line.patch

OSS drivers

+binfmt_misc-use-simple_read_from_buffer.patch

ninfmt_misc cleanup

+add-a-warn-macro-this-is-warn_on-printk-arguments-fix-2.patch
+kernel-irq-managec-replace-a-printk-warn_on-to-a-warn.patch

More WARN_ON fiddling

+list-debugging-use-warn_on-instead-of-bug.patch

list-management update

+flag-parameters-signalfd-fix.patch

Fix flag-parameters-signalfd.patch

+flag-parameters-eventfd-fix.patch

Fix flag-parameters-eventfd.patch

+flag-parameters-check-magic-constants-alpha.patch

Fix flag-parameters-check-magic-constants.patch

+cputopology-always-define-cpu-topology-information.patch
+cputopology-always-define-cpu-topology-information-cleanup.patch

CPU topology updates

+8250-fix-break-handling-for-intel-82571.patch
+serial-add-support-for-a-no-name-4-ports-multiserial-card.patch

Serial updates

+oprofile-multiplexing.patch
+oprofile-multiplexing-checkpatch-fixes.patch

oprofile feature (future is unertain)

+spi-make-spi_board_infomodalias-a-char-array.patch
+spidev-bkl-removal.patch

SPI updates

+vt-hold-console_sem-across-sysfs-operations.patch

VT fix

+kprobes-improve-kretprobe-scalability-with-hashed-locking.patch

kprobes speedup

+i2o-handle-sysfs_create_link-failures.patch

i2o fix

+ecryptfs-privileged-kthread-for-lower-file-opens.patch

ecryptfs work

+rtc-push-the-bkl-down-into-the-driver-ioctl-method.patch
+rtc-push-the-bkl-down-into-the-driver-ioctl-method-fix.patch

RTC updates

+gpio-gpio-driver-for-max7301-spi-gpio-expander.patch
+gpio-gpio-driver-for-max7301-spi-gpio-expander-checkpatch-fixes.patch

GPIO updates

+tridentfb-acceleration-code-improvements.patch
+tridentfb-acceleration-bug-fixes.patch
+tridentfb-various-pixclock-and-timing-improvements.patch
+tridentfb-acceleration-constants-change.patch
+tridentfb-source-code-improvements.patch
+tridentfb-fix-console-freeze-when-switching-from-x11.patch
+tridentfb-fix-224-color-logo-at-8-bpp.patch
+tridentfb-y-panning-fixes.patch
+tridentfb-blade3d-clock-fixes.patch
+atmel_lcdfb-fifo-underflow-management.patch
+atmel_lcdfb-fifo-underflow-management-rework.patch
+fbcon-make-logo_height-a-local-variable.patch
+uvesafb-change-mode-parameter-to-mode_option.patch
+tridentfb-documentation-update.patch
+tdfxfb-add-mode_option-module-parameter.patch
+vga16fb-source-code-improvement.patch
+tdfxfb-remove-ypan-checks-done-by-a-higher-layer.patch
+video-superh-mobile-lcdc-driver.patch
+video-superh-mobile-lcdc-driver-update.patch
+vfb-only-enable-if-explicitly-requested-when-compiled-in.patch
+hgafb-convert-to-new-platform-driver-api-bugzilla-9689.patch
+fbdev-width-and-height-are-unsigned.patch
+fbdev-xoffset-yoffset-and-yres-are-unsigned.patch
+atyfb-remove-dead-code.patch
+atyfb-correct_chipset-can-fail.patch
+atyfb-use-a-pci-device-id-table.patch
+atyfb-report-probe-errors.patch
+atyfb-fix-a-cast.patch
+aty-use-memory_read_from_buffer.patch
+skeletonfb-update-to-correct-platform-driver-usage.patch
+atmel_lcdfb-avoid-division-by-zero.patch
+atmel_lcdfb-avoid-division-by-zero-checkpatch-fixes.patch

fbdev updates

+pnp-make-pnp_portmemetc_start-et-al-work-for-invalid-resources.patch
+pnp-replace-pnp_resource_table-with-dynamically-allocated-resources.patch
+pnp-replace-pnp_resource_table-with-dynamically-allocated-resources-fix.patch
+pnp-remove-ratelimit-on-add-resource-failures.patch
+pnp-dont-sort-by-type-in-sys-resources.patch
+pnp-set-the-pnp_card-dma_mask-for-use-by-isapnp-cards.patch
+isa-set-24-bit-dma_mask-for-isa-devices.patch
+pnp-add-pnp_possible_config-can-a-device-could-be-configured-this-way.patch
+pnp-add-pnp_possible_config-can-a-device-could-be-configured-this-way-fix.patch
+pnp-whitespace-coding-style-fixes.patch
+pnp-define-pnp-specific-ioresource_io_-flags-alongside-irq-dma-mem.patch
+pnp-make-resource-option-structures-private-to-pnp-subsystem.patch
+pnp-introduce-pnp_irq_mask_t-typedef.patch
+pnp-increase-i-o-port-memory-option-address-sizes.patch
+pnp-improve-resource-assignment-debug.patch
+pnp-in-debug-resource-dump-make-empty-list-obvious.patch
+pnp-make-resource-assignment-functions-return-0-success-or-ebusy-failure.patch
+pnp-remove-redundant-pnp_can_configure-check.patch
+pnp-centralize-resource-option-allocations.patch
+pnpacpi-ignore-_prs-interrupt-numbers-larger-than-pnp_irq_nr.patch
+pnp-rename-pnp_register__resource-local-variables.patch
+pnp-support-optional-irq-resources.patch
+pnp-remove-extra-0x100-bit-from-option-priority.patch
+isapnp-handle-independent-options-following-dependent-ones.patch
+pnp-convert-resource-options-to-single-linked-list.patch
+pnp-convert-resource-options-to-single-linked-list-checkpatch-fixes.patch

PNP updates

+ext2-remove-double-definitions-of-xattr-macros.patch

ext2 cleanup

+ext3-improve-some-code-in-rb-tree-part-of-dirc.patch
+jbd-fix-race-between-free-buffer-and-commit-trasanction.patch
+jbd-fix-race-between-free-buffer-and-commit-trasanction-checkpatch-fixes.patch
+jbd-fix-race-between-free-buffer-and-commit-trasanction-checkpatch-fixes-fix.patch
+ext3-remove-double-definitions-of-xattr-macros.patch
+jbd-strictly-check-for-write-errors-on-data-buffers.patch
+jbd-ordered-data-integrity-fix.patch
+jbd-abort-when-failed-to-log-metadata-buffers.patch
+jbd-fix-error-handling-for-checkpoint-io.patch
+ext3-abort-ext3-if-the-journal-has-aborted.patch
+ext3-abort-ext3-if-the-journal-has-aborted-warning-fix.patch

ext3 updates (some will be dropped)

+reiserfs-remove-double-definitions-of-xattr-macros.patch

reserfs cleanup

+msdos-fs-remove-unsettable-atari-option.patch

msdos fixlet

+quota-rename-quota-functions-from-upper-case-make-bigger-ones-non-inline.patch
+quota-cleanup-loop-in-sync_dquots.patch
+quota-move-function-macros-from-quotah-to-quotaopsh.patch
+quota-move-function-macros-from-quotah-to-quotaopsh-jfs-fix.patch
+quota-move-function-macros-from-quotah-to-quotaopsh-jfs-fix-fix.patch
+quota-convert-macros-to-inline-functions.patch

quote cleanups

+cgroup-list_for_each-cleanup-v2.patch
+cgroup-anotate-two-variables-with-__read_mostly.patch

cgroups updates

+memcg-remove-refcnt-from-page_cgroup.patch
+memcg-remove-refcnt-from-page_cgroup-fix.patch
+memcg-handle-swap-cache.patch
+memcg-handle-swap-cache-fix.patch
+memcg-helper-function-for-relcaim-from-shmem.patch
+memcg-add-hints-for-branch.patch
+memcg-remove-a-redundant-check.patch
+memcg-clean-up-checking-of-the-disabled-flag.patch

memoru controller updates

+memrlimit-add-memrlimit-controller-documentation.patch
+memrlimit-setup-the-memrlimit-controller.patch
+memrlimit-cgroup-mm-owner-callback-changes-to-add-task-info.patch
+memrlimit-add-memrlimit-controller-accounting-and-control.patch

New cgroup conrtoller

+cpusets-restructure-the-function-update_cpumask-and-update_nodemask.patch
+cpusets-update-tasks-cpus_allowed-and-mems_allowed-after-cpu-node-offline-online.patch

cpusets work

+introduce-pf_kthread-flag.patch
+kill-pf_borrowed_mm-in-favour-of-pf_kthread.patch
+coredump-zap_threads-must-skip-kernel-threads.patch

coredump fixlet

+posix-timers-timer_delete-remove-the-bogus-it_process-=-null-check.patch
+posix-timers-release_posix_timer-kill-the-bogus-put_task_struct-it_process.patch
+signals-collect_signal-remove-the-unneeded-sigismember-check.patch
+signals-collect_signal-simplify-the-still_pending-logic.patch
+signals-change-collect_signal-to-return-void.patch
+__exit_signal-dont-take-rcu-lock.patch
+signals-dequeue_signal-dont-check-signal_group_exit-when-setting-signal_stop_dequeued.patch
+signals-do_signal_stop-kill-the-signal_unkillable-check.patch
+coredump-zap_threads-comments-use-while_each_thread.patch

Signal management updates

ext4-mm-stable-boundary.patch
ext4-mm-stable-boundary-undo.patch
+ext4-mm-ext4-new-defm-options.patch
+ext4-mm-ext4-call-blkdev_issue_flush-on-fsync.patch
ext4-mm-ext4-page-mkwrite.patch
-ext4-mm-ext4-retry-if-allocated-from-system-zone.patch
ext4-mm-ext4_ialloc-flexbg.patch
ext4-mm-delalloc-vfs.patch
ext4-mm-ext4-fix-fs-corruption-with-delalloc.patch
ext4-mm-delalloc-ext4.patch
+ext4-mm-delalloc-ext4-release-page-when-write_begin-failed.patch
ext4-mm-delalloc-ext4-preallocation-handling.patch
ext4-mm-delalloc-i-disksize-update.patch
ext4-mm-jbd-blocks-reservation-fix-for-large-blk.patch
ext4-mm-ext4-online-defrag-for-relevant-files.patch
ext4-mm-ext4-online-defrag-check-for-freespace-fragmentation.patch
ext4-mm-ext4-online-defrag-move-victim-files.patch
-ext4-mm-jbd2-commit-time.patch
ext4-mm-vfs-fiemap.patch
ext4-mm-ext4-add-ext4_ext_walk_space.patch
ext4-mm-ext4-fiemap.patch
-ext4-mm-ext4-inverse-pagelock-vs-transaction.patch
-ext4-mm-delalloc-ext4-lock-reverse.patch

hm, why isn't ext4 in linux-next?

+ext4-error-proc-entry-creation-when-the-fs-ext4-is-not-correctly-created.patch
+ext4-improve-some-code-in-rb-tree-part-of-dirc.patch
+ext4-remove-double-definitions-of-xattr-macros.patch
+ext4-error-processing-and-coding-enhancement-for-mballoc.patch
+ext4-fix-error-processing-in-mb_free_blocks.patch
+jbd2-fix-race-between-jbd2_journal_try_to_free_buffers-and-jbd2-commit-transaction.patch
+jbd2-fix-race-between-jbd2_journal_try_to_free_buffers-and-jbd2-commit-transaction-cleanup.patch

ext4 things

+idr-make-idr_get_new-rcu-safe-fix.patch

Fix idr-make-idr_get_new-rcu-safe.patch

+ipc-semc-convert-undo-structures-to-struct-list_head.patch
+ipc-semc-convert-undo-structures-to-struct-list_head-checkpatch-fixes.patch
+ipc-semc-remove-unused-entries-from-struct-sem_queue.patch
+ipc-semc-convert-sem_arraysem_pending-to-struct-list_head.patch
+ipc-semc-convert-sem_arraysem_pending-to-struct-list_head-checkpatch-fixes.patch
+ipc-semc-rewrite-undo-list-locking.patch
+ipc-semc-rewrite-undo-list-locking-checkpatch-fixes.patch
+ipc-use-simple_read_from_buffer.patch

IPC updates

+tty-remove-unused-var-real_tty-in-n_tty_ioctl.patch

tty work

+efirtc-push-down-the-bkl.patch
+ip2-push-bkl-down-for-the-firmware-interface.patch
+mwave-ioctl-bkl-pushdown.patch
+rio-push-down-the-bkl-into-the-firmware-ioctl-handler.patch
+sx-push-bkl-down-into-the-firmware-ioctl-handler.patch
+ixj-push-bkl-into-driver-and-wrap-ioctls.patch
+ppdev-wrap-ioctl-handler-in-driver-and-push-lock-down.patch
+ds1302-push-down-the-bkl-into-the-driver-ioctl-code.patch
+dsp56k-bkl-pushdown.patch
+zorro-use-memory_read_from_buffer.patch
+nwflash-use-simple_read_from_buffer.patch

char driver work

+sgi-xp-define-is_shub-and-is_uv-macros.patch
+sgi-xp-define-xpsalerror-reason-code.patch
+sgi-xp-define-bytes_per_word.patch
+sgi-xp-support-runtime-selection-of-xp_max_npartitions.patch
+sgi-xp-create-a-common-xp_remote_memcpy-function.patch
+sgi-xp-prepare-xpc_rsvd_page-to-work-on-either-sn2-or-uv-hardware.patch
+sgi-xp-isolate-xpc_vars_part-structure-to-sn2-only.patch
+sgi-xp-isolate-xpc_vars-structure-to-sn2-only.patch
+sgi-xp-base-xpc_rsvd_pages-timestamp-on-jiffies.patch
+sgi-xp-move-xpc_allocate-into-xpc_send-xpc_send_notify.patch
+sgi-xp-isolate-activate-irqs-hardware-specific-components.patch
+sgi-xp-isolate-additional-sn2-specific-code.patch
+sgi-xp-separate-chctl_flags-from-xpcs-notify-irq.patch
+sgi-xp-replace-amo_t-typedef-by-struct-amo.patch
+sgi-xp-isolate-allocation-of-xpcs-msgqueues-to-sn2-only.patch
+sgi-xp-enable-xpnet-to-handle-more-than-64-partitions.patch
+sgi-xp-isolate-remote-copy-buffer-to-sn2-only.patch
+sgi-xp-add-_sn2-suffix-to-a-few-variables.patch

SGI XP driver updates

+firmware-use-memory_read_from_buffer.patch
+dcdbas-use-memory_read_from_buffer.patch
+dell_rbu-use-memory_read_from_buffer.patch

cleanups

+sysctl-check-for-bogus-modes.patch
+sysctl-allow-override-of-proc-sys-net-with-cap_net_admin.patch

susctl work

+ata-over-ethernet-convert-emsgs_sema-in-a-completion.patch

AOE

+markers-use-rcu_barrier_sched-and-call_rcu_sched.patch

Markers

+accounting-account-for-user-time-when-updating-memory-integrals.patch

accounting feature

+bsdacct-rename-acct_blbls-to-bsd_acct_struct.patch
+pidns-use-kzalloc-when-allocating-new-pid_namespace-struct.patch
+pidns-add-the-struct-bsd_acct_struct-pointer-on-pid_namespace-struct.patch
+bsdacct-truthify-a-comment-near-acct_process.patch
+bsdacct-make-check-timer-accept-a-bsd_acct_struct-argument.patch
+bsdacct-turn-the-acct_lock-from-on-the-struct-to-global.patch
+bsdacct-make-internal-code-work-with-passed-bsd_acct_struct-not-global.patch
+bsdacct-switch-from-global-bsd_acct_struct-instance-to-per-pidns-one.patch
+bsdacct-turn-acct-off-for-all-pidns-s-on-umount-time.patch
+bsdacct-account-dying-tasks-in-all-relevant-namespaces.patch
+bsdacct-stir-up-comments-around-acct_process.patch

BSD accountig work

+distinct-tgid-tid-i-o-statistics.patch
+update-taskstats-struct-document-for-scaled-time-accounting.patch
+per-task-delay-accounting-add-memory-reclaim-delay.patch
+per-task-delay-accounting-update-taskstats-for-memory-reclaim-delay.patch
+per-task-delay-accounting-update-document-and-getdelaysc-for-memory-reclaim.patch
+getdelaysc-add-a-usr1-signal-handler.patch
+getdelaysc-add-a-usr1-signal-handler-checkpatch-fixes.patch

taskstats work

+lockd-dont-return-eagain-for-a-permanent-error.patch
+locks-add-special-return-value-for-asynchronous-locks.patch
+locks-cleanup-code-duplication.patch
+locks-allow-lock-to-return-file_lock_deferred.patch
+fuse-prepare-lookup-for-nfs-export.patch
+fuse-add-export-operations.patch
+fuse-add-fuse_lookup_name-helper.patch
+fuse-nfs-export-special-lookups.patch
+fuse-lockd-support.patch

FUSE updates

+dma-mapping-add-the-device-argument-to-dma_mapping_error.patch
+dma-mapping-add-the-device-argument-to-dma_mapping_error-sge-fix.patch
+dma-mapping-add-the-device-argument-to-dma_mapping_error-svc_rdma-fix.patch
+dma-mapping-add-the-device-argument-to-dma_mapping_error-bnx2x.patch
+dma-mapping-add-the-device-argument-to-dma_mapping_error-sparc32.patch
+dma-mapping-x86-per-device-dma_mapping_ops-support.patch
+dma-mapping-x86-per-device-dma_mapping_ops-support-fix.patch

DMA-mapping updates

+bfs-assorted-cleanups.patch
+bfs-kill-bkl.patch

bfs maintenance

+tpm-correct-tpm-timeouts-to-jiffies-conversion.patch
+tpm-increase-size-of-internal-tpm-response-buffers.patch
+tpm-increase-size-of-internal-tpm-response-buffers-checkpatch-fixes.patch

TPM updates

+memstick-allow-set_param-method-to-return-an-error-code.patch
+memstick-allow-set_param-method-to-return-an-error-code-checkpatch-fixes.patch
+memstick-add-start-and-stop-methods-to-memstick-device.patch
+revert-linux-next-changes-to-make-memstick-use-fully-asynchronous-request-processing-apply.patch
+memstick-use-fully-asynchronous-request-processing.patch
+revert-revert-linux-next-changes-to-make-memstick-use-fully-asynchronous-request-processing-apply.patch

memstick fixlets

+mn10300-use-the-common-ascii-hex-helpers.patch

mn10300 cleanup

+common-implementation-of-iterative-div-mod.patch
+add-an-inlined-version-of-iter_div_u64_rem.patch
+always_inline-timespec_add_ns.patch

Might fix a few problems with open-coded div/mods

+kernel-call-constructors.patch
+kernel-introduce-gcc_version_lower-macro.patch
+seq_file-add-function-to-write-binary-data.patch
+gcov-add-gcov-profiling-infrastructure.patch
+gcov-create-links-to-gcda-files-in-build-directory.patch
+gcov-architecture-specific-compile-flag-adjustments.patch

gcov feature

+x86-implement-pte_special.patch
+mm-introduce-get_user_pages_fast.patch
+mm-introduce-get_user_pages_fast-fix.patch
+mm-introduce-get_user_pages_fast-checkpatch-fixes.patch
+x86-lockless-get_user_pages_fast.patch
+x86-lockless-get_user_pages_fast-checkpatch-fixes.patch
+x86-lockless-get_user_pages_fast-fix.patch
+x86-lockless-get_user_pages_fast-fix-2.patch
+x86-lockless-get_user_pages_fast-fix-2-fix.patch
+x86-lockless-get_user_pages_fast-fix-2-fix-fix.patch
+x86-lockless-get_user_pages_fast-fix-warning.patch
+dio-use-get_user_pages_fast.patch
+splice-use-get_user_pages_fast.patch

fast get_user_pages() for x86

+mm-readahead-scan-lockless.patch
+radix-tree-add-gang_lookup_slot-gang_lookup_slot_tag.patch
+mm-speculative-page-references.patch
+mm-speculative-page-references-fix.patch
+mm-lockless-pagecache.patch
+mm-spinlock-tree_lock.patch
+powerpc-implement-pte_special.patch

lockess pagecache

+vmscan-move-isolate_lru_page-to-vmscanc.patch
+vmscan-use-an-indexed-array-for-lru-variables.patch
+vmscan-use-an-array-for-the-lru-pagevecs.patch
+vmscan-free-swap-space-on-swap-in-activation.patch
+vmscan-define-page_file_cache-function.patch
+vmscan-split-lru-lists-into-anon-file-sets.patch
+vmscan-second-chance-replacement-for-anonymous-pages.patch
+vmscan-add-some-sanity-checks-to-get_scan_ratio.patch
+vmscan-fix-pagecache-reclaim-referenced-bit-check.patch
+vmscan-add-newly-swapped-in-pages-to-the-inactive-list.patch
+vmscan-more-aggressively-use-lumpy-reclaim.patch
+vmscan-pageflag-helpers-for-configed-out-flags.patch
+vmscan-noreclaim-lru-infrastructure.patch
+vmscan-noreclaim-lru-page-statistics.patch
+vmscan-ramfs-and-ram-disk-pages-are-non-reclaimable.patch
+vmscan-shm_locked-pages-are-non-reclaimable.patch
+vmscan-mlocked-pages-are-non-reclaimable.patch
+vmscan-downgrade-mmap-sem-while-populating-mlocked-regions.patch
+vmscan-handle-mlocked-pages-during-map-remap-unmap.patch
+vmscan-mlocked-pages-statistics.patch
+vmscan-cull-non-reclaimable-pages-in-fault-path.patch
+vmscan-noreclaim-and-mlocked-pages-vm-events.patch
+mm-only-vmscan-noreclaim-lru-scan-sysctl.patch
+vmscan-mlocked-pages-count-attempts-to-free-mlocked-page.patch
+vmscan-noreclaim-lru-and-mlocked-pages-documentation.patch

Basically rewrite page reclaim

+reiser4-tree_lock-fixes.patch

Repair reiser4

-put_pid-make-sure-we-dont-free-the-live-pid.patch

Dropped.



1364 commits in 941 patch files

All patches:

ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.26-rc5/2.6.26-rc5-mm1/patch-list


2008-06-09 17:23:16

by Balbir Singh

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1

* Balbir Singh <[email protected]> [2008-06-09 22:50:49]:

> Andrew Morton wrote:
> >
> > +memrlimit-add-memrlimit-controller-documentation.patch
> > +memrlimit-setup-the-memrlimit-controller.patch
> > +memrlimit-cgroup-mm-owner-callback-changes-to-add-task-info.patch
> > +memrlimit-add-memrlimit-controller-accounting-and-control.patch
> >
> > New cgroup conrtoller
> >

Hi, Andrew,

There seems to be a merge fuzz, sorry for not catching it when you sent the mm
merge email

What I sent was

@@ -2056,6 +2058,7 @@ void exit_mmap(struct mm_struct *mm)
/* Use -1 here to ensure all VMAs in the mm are unmapped */
end = unmap_vmas(&tlb, vma, 0, -1, &nr_accounted, NULL);
vm_unacct_memory(nr_accounted);
+ memrlimit_cgroup_uncharge_as(mm, mm->total_vm);

What got merged is

@@ -1756,7 +1783,8 @@ static void unmap_region(struct mm_struc
update_hiwater_rss(mm);
unmap_vmas(&tlb, vma, start, end, &nr_accounted, NULL);
vm_unacct_memory(nr_accounted);
- free_pgtables(&tlb, vma, prev? prev->vm_end: FIRST_USER_ADDRESS,
+ memrlimit_cgroup_uncharge_as(mm, mm->total_vm);

Here's a patch to fix the problem


Signed-off-by: Balbir Singh <[email protected]>
---

mm/mmap.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff -puN mm/memory.c~memrlimit-fix-fuzz-in-merge mm/memory.c
diff -puN mm/mmap.c~memrlimit-fix-fuzz-in-merge mm/mmap.c
--- linux-2.6.26-rc5/mm/mmap.c~memrlimit-fix-fuzz-in-merge 2008-06-09 22:49:49.000000000 +0530
+++ linux-2.6.26-rc5-balbir/mm/mmap.c 2008-06-09 22:50:13.000000000 +0530
@@ -1783,7 +1783,6 @@ static void unmap_region(struct mm_struc
update_hiwater_rss(mm);
unmap_vmas(&tlb, vma, start, end, &nr_accounted, NULL);
vm_unacct_memory(nr_accounted);
- memrlimit_cgroup_uncharge_as(mm, mm->total_vm);
free_pgtables(tlb, vma, prev? prev->vm_end: FIRST_USER_ADDRESS,
next? next->vm_start: 0);
tlb_finish_mmu(tlb, start, end);
@@ -2111,6 +2110,7 @@ void exit_mmap(struct mm_struct *mm)
/* Use -1 here to ensure all VMAs in the mm are unmapped */
end = unmap_vmas(&tlb, vma, 0, -1, &nr_accounted, NULL);
vm_unacct_memory(nr_accounted);
+ memrlimit_cgroup_uncharge_as(mm, mm->total_vm);
free_pgtables(tlb, vma, FIRST_USER_ADDRESS, 0);
tlb_finish_mmu(tlb, 0, end);

_


--
Warm Regards,
Balbir Singh
Linux Technology Center
IBM, ISTL

2008-06-09 17:27:41

by Balbir Singh

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1

Andrew Morton wrote:
> Temporarily at
>
> http://userweb.kernel.org/~akpm/2.6.26-rc5-mm1/
>

I've hit a segfault, the last few lines on my console are


Testing -fstack-protector-all feature
registered taskstats version 1
debug: unmapping init memory ffffffff80c03000..ffffffff80dd8000
init[1]: segfault at 7fff701fe880 ip 7fff701fee5e sp 7fff7006e6d0 error 7

With absolutely no stack trace. I'll dig deeper.

--
Warm Regards,
Balbir Singh
Linux Technology Center
IBM, ISTL

2008-06-09 17:31:59

by Kamalesh Babulal

[permalink] [raw]
Subject: [BUG] 2.6.26-rc5-mm1- kernel BUG at arch/x86/kernel/io_apic_64.c:355!

Hi Andrew,

The 2.6.26-rc5-mm1 kernel panics while bootup on 32 way, x86_64 machine.
passing noapic as the command line parameter, boots up
the machine fine.

kernel BUG at arch/x86/kernel/io_apic_64.c:355!
invalid opcode: 0000 [1] SMP
last sysfs file:
CPU 24
Modules linked in:
Pid: 1, comm: swapper Not tainted 2.6.26-rc5-mm1-autotest #1
RIP: 0010:[<ffffffff8021b9da>] [<ffffffff8021b9da>] add_pin_to_irq+0x7a/0x90
RSP: 0018:ffff81061e4cbb60 EFLAGS: 00010216
RAX: 00000000000000f0 RBX: 00000000000000f0 RCX: 0000000000000001
RDX: 0000000000000018 RSI: 0000000000000006 RDI: 00000000000000f0
RBP: 0000000000000006 R08: 0000000000000018 R09: 0000000000000006
R10: 0000000000000008 R11: ffffffff803948e6 R12: 0000000000000001
R13: 0000000000000001 R14: 0000000000000018 R15: ffff81061e4cbc04
FS: 0000000000000000(0000) GS:ffff810bfe7be5c0(0000) knlGS:0000000000000000
CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 0000000000000000 CR3: 0000000000201000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process swapper (pid: 1, threadinfo ffff81061e4ca000, task ffff81032e4b96d0)
Stack: 0000000000000006 ffffffff8021ba6e 00000000000000f0 0000000000000001
0000000000000000 0000000000000000 ffff81061e4cbc00 ffffffff80218991
00000000000000f0 0000000000000000 0000000000000001 ffffffff80218a1a
Call Trace:
[<ffffffff8021ba6e>] io_apic_set_pci_routing+0x7e/0xb0
[<ffffffff80218991>] mp_register_gsi+0xb1/0xd0
[<ffffffff80218a1a>] acpi_register_gsi+0x6a/0x70
[<ffffffff80394b20>] acpi_pci_irq_enable+0x14f/0x220
[<ffffffff803948e6>] acpi_pci_allocate_irq+0x0/0x4c
[<ffffffff8036e14a>] do_pci_enable_device+0x4a/0x70
[<ffffffff8036e1c1>] __pci_enable_device_flags+0x51/0x60
[<ffffffff804f1608>] tg3_init_one+0x58/0x1640
[<ffffffff80229790>] default_wake_function+0x0/0x10
[<ffffffff8022e942>] set_cpus_allowed_ptr+0xc2/0xf0
[<ffffffff803703b7>] pci_device_probe+0xe7/0x130
[<ffffffff803c38b6>] driver_probe_device+0x96/0x1a0
[<ffffffff803c3a49>] __driver_attach+0x89/0x90
[<ffffffff803c39c0>] __driver_attach+0x0/0x90
[<ffffffff803c2dbd>] bus_for_each_dev+0x4d/0x80
[<ffffffff8028f708>] kmem_cache_alloc+0xc8/0xf0
[<ffffffff803c341e>] bus_add_driver+0xae/0x220
[<ffffffff803c3cd6>] driver_register+0x56/0x130
[<ffffffff80370678>] __pci_register_driver+0x68/0xb0
[<ffffffff806e5060>] tg3_init+0x0/0x20
[<ffffffff806c8a63>] kernel_init+0x153/0x320
[<ffffffff8020c378>] child_rip+0xa/0x12
[<ffffffff806c8910>] kernel_init+0x0/0x320
[<ffffffff8020c36e>] child_rip+0x0/0x12


Code: 89 05 27 88 43 00 7f 29 48 0f bf c1 48 8d 14 00 48 c1 e0 03 48 29 d0 48 8d 90 00 44 74 80 66 89 32 66 44 89 42 02 48 83 c4 08 c3 <0f> 0b eb fe 66 90 48 c7 c7 08 7d 5e 80 31 c0 e8 72 7b 01 00 66
RIP [<ffffffff8021b9da>] add_pin_to_irq+0x7a/0x90
RSP <ffff81061e4cbb60>
---[ end trace 5a53b6247c28d358 ]---
Kernel panic - not syncing: Attempted to kill init!
Pid: 1, comm: swapper Tainted: G D 2.6.26-rc5-mm1-autotest #1

Call Trace:
[<ffffffff802335e6>] panic+0x86/0x170
[<ffffffff8023434e>] printk+0x4e/0x60
[<ffffffff80236d30>] do_exit+0x770/0x780
[<ffffffff8020c817>] oops_end+0x87/0x90
[<ffffffff8020ddf6>] do_invalid_op+0x86/0xa0
[<ffffffff8021b9da>] add_pin_to_irq+0x7a/0x90
[<ffffffff803ad7d4>] vt_console_print+0x224/0x2f0
[<ffffffff80373f00>] dummycon_dummy+0x0/0x10
[<ffffffff80500c09>] error_exit+0x0/0x51
[<ffffffff803948e6>] acpi_pci_allocate_irq+0x0/0x4c
[<ffffffff8021b9da>] add_pin_to_irq+0x7a/0x90
[<ffffffff8021ba6e>] io_apic_set_pci_routing+0x7e/0xb0
[<ffffffff80218991>] mp_register_gsi+0xb1/0xd0
[<ffffffff80218a1a>] acpi_register_gsi+0x6a/0x70
[<ffffffff80394b20>] acpi_pci_irq_enable+0x14f/0x220
[<ffffffff803948e6>] acpi_pci_allocate_irq+0x0/0x4c
[<ffffffff8036e14a>] do_pci_enable_device+0x4a/0x70
[<ffffffff8036e1c1>] __pci_enable_device_flags+0x51/0x60
[<ffffffff804f1608>] tg3_init_one+0x58/0x1640
[<ffffffff80229790>] default_wake_function+0x0/0x10
[<ffffffff8022e942>] set_cpus_allowed_ptr+0xc2/0xf0
[<ffffffff803703b7>] pci_device_probe+0xe7/0x130
[<ffffffff803c38b6>] driver_probe_device+0x96/0x1a0
[<ffffffff803c3a49>] __driver_attach+0x89/0x90
[<ffffffff803c39c0>] __driver_attach+0x0/0x90
[<ffffffff803c2dbd>] bus_for_each_dev+0x4d/0x80
[<ffffffff8028f708>] kmem_cache_alloc+0xc8/0xf0
[<ffffffff803c341e>] bus_add_driver+0xae/0x220
[<ffffffff803c3cd6>] driver_register+0x56/0x130
[<ffffffff80370678>] __pci_register_driver+0x68/0xb0
[<ffffffff806e5060>] tg3_init+0x0/0x20
[<ffffffff806c8a63>] kernel_init+0x153/0x320
[<ffffffff8020c378>] child_rip+0xa/0x12
[<ffffffff806c8910>] kernel_init+0x0/0x320
[<ffffffff8020c36e>] child_rip+0x0/0x12

--
Thanks & Regards,
Kamalesh Babulal,
Linux Technology Center,
IBM, ISTL.


Attachments:
config-x86_64-2-6-26-rc5-mm1 (34.92 kB)

2008-06-09 19:15:22

by Mariusz Kozlowski

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1

Hello Balbir,

> Andrew Morton wrote:
> > Temporarily at
> >
> > http://userweb.kernel.org/~akpm/2.6.26-rc5-mm1/
> >
>
> I've hit a segfault, the last few lines on my console are
>
>
> Testing -fstack-protector-all feature
> registered taskstats version 1
> debug: unmapping init memory ffffffff80c03000..ffffffff80dd8000
> init[1]: segfault at 7fff701fe880 ip 7fff701fee5e sp 7fff7006e6d0 error 7
>
> With absolutely no stack trace. I'll dig deeper.

Hey, I see something similar and I actually have a stack trace. Here it goes:

bash[498] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fffa3d010f0 error 7
init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fff9e97f640 error 7
init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fff9e97eed0 error 7
Kernel panic - not syncing: Attemted to kill init!
Pid 1, comm: init Not tainted 2.6.26-rc5-mm1 #1

Call Trace:
[<ffffffff80254632>] panic+0xe2/0x260
[<ffffffff802fa8ba>] ? __slab_free+0x10a/0x630
[<ffffffff80265a8e>] ? __sigqueue_free+0x5e/0x70
[<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
[<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
[<ffffffff80259b54>] do_exit+0xb84/0xc30
[<ffffffff80259c5a>] do_group_exit+0x5a/0x110
[<ffffffff8026a3b5>] get_signal_to_deliver+0x2c5/0x620
[<ffffffff8020bb3b>] do_notify_resume+0x11b/0xd10
[<ffffffff8028da5b>] ? trace_hardirqs_on+0x1b/0x30
[<ffffffff805cd0f3>] ? _spin_unlock_irqrestore+0x93/0x130
[<ffffffff8026865c>] ? force_sig_info+0x10c/0x130
[<ffffffff8022fb9c>] ? force_sig_info_fault+0x2c/0x40
[<ffffffff802dd7dd>] ? print_vma_addr+0x10d/0x1d0
[<ffffffff805cbb67>] ? trace_hardirqs_on_thunk+0x3a/0x3f
[<ffffffff8028d8da>] ? trace_hardirqs_on_caller+0x15a/0x2c0
[<ffffffff8020d4c9>] retint_signal+0x46/0x8d

This was copied manually so typos are possible.

Mariusz

2008-06-09 19:20:18

by Mariusz Kozlowski

[permalink] [raw]
Subject: [PATCH] Re: 2.6.26-rc5-mm1 - fix parenthesis in drivers/net/smc911x.h

Parenthesis fix in drivers/net/smc911x.h

Signed-off-by: Mariusz Kozlowski <[email protected]>

--- linux-2.6.26-rc5-mm1-a/drivers/net/smc911x.h 2008-06-09 19:22:02.000000000 +0200
+++ linux-2.6.26-rc5-mm1-b/drivers/net/smc911x.h 2008-06-09 19:24:57.000000000 +0200
@@ -177,7 +177,7 @@ static inline void SMC_outsl(struct smc9
}
#else
#if SMC_USE_16BIT
-#define SMC_inl(lp, r) (readw((lp)->base + (r)) & 0xFFFF) + (readw((lp)->base + (r) + 2) << 16))
+#define SMC_inl(lp, r) ((readw((lp)->base + (r)) & 0xFFFF) + (readw((lp)->base + (r) + 2) << 16))
#define SMC_outl(v, lp, r) \
do{ \
writew(v & 0xFFFF, (lp)->base + (r)); \

2008-06-09 20:50:24

by Alexey Dobriyan

[permalink] [raw]
Subject: 2.6.26-rc5-mm1: kernel BUG at mm/filemap.c:575!

This happened after LTP run finished.

------------[ cut here ]------------
kernel BUG at mm/filemap.c:575!
invalid opcode: 0000 [1] PREEMPT SMP DEBUG_PAGEALLOC
last sysfs file: /sys/kernel/uevent_seqnum
CPU 1
Modules linked in: ext2 nf_conntrack_irc xt_state iptable_filter ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack ip_tables x_tables usblp uhci_hcd ehci_hcd usbcore sr_mod cdrom
Pid: 19327, comm: pdflush Not tainted 2.6.26-rc5-mm1 #4
RIP: 0010:[<ffffffff80266a37>] [<ffffffff80266a37>] unlock_page+0x17/0x40
RSP: 0018:ffff81015c697540 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffe20000e38c08 RCX: 0000000000000034
RDX: 0000000000000000 RSI: ffffe20000e38c08 RDI: ffffe20000e38c08
RBP: ffff81015c697550 R08: 0000000000000002 R09: 000000000007794e
R10: ffffffff8028b6f1 R11: 0000000000000001 R12: ffffe20000e38c08
R13: 0000000000000000 R14: ffff81015c6977a0 R15: ffff81015c6978c0
FS: 0000000000000000(0000) GS:ffff81017f845320(0000) knlGS:0000000000000000
CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 00007fb64f84f020 CR3: 0000000000201000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process pdflush (pid: 19327, threadinfo ffff81015c696000, task ffff81015c795690)
Stack: ffff81015c697550 0000000000000000 ffff81015c697680 ffffffff802722ce
ffffe20005367df8 ffff81015c697640 0000000000000000 0000000000000001
0000000000000001 0000000000000001 ffffe20000b02d38 ffffe20001274970
Call Trace:
[<ffffffff802722ce>] shrink_page_list+0x2ce/0x6d0
[<ffffffff80254f37>] ? mark_held_locks+0x47/0x90
[<ffffffff8025517d>] ? trace_hardirqs_on+0xd/0x10
[<ffffffff802550e9>] ? trace_hardirqs_on_caller+0xc9/0x150
[<ffffffff802728f4>] shrink_list+0x224/0x590
[<ffffffff80272eab>] shrink_zone+0x24b/0x330
[<ffffffff80273407>] try_to_free_pages+0x267/0x3e0
[<ffffffff80271510>] ? isolate_pages_global+0x0/0x270
[<ffffffff8026cf86>] __alloc_pages_internal+0x1b6/0x470
[<ffffffff8028d061>] __slab_alloc+0x181/0x660
[<ffffffff80254f37>] ? mark_held_locks+0x47/0x90
[<ffffffff802f65a8>] ? journal_add_journal_head+0x88/0x230
[<ffffffff8025517d>] ? trace_hardirqs_on+0xd/0x10
[<ffffffff8028d973>] kmem_cache_alloc+0xb3/0xd0
[<ffffffff802f65a8>] ? journal_add_journal_head+0x88/0x230
[<ffffffff802f65a8>] journal_add_journal_head+0x88/0x230
[<ffffffff802f23a9>] journal_dirty_data+0x59/0x2d0
[<ffffffff802e355f>] ext3_journal_dirty_data+0x1f/0x50
[<ffffffff802e35a5>] journal_dirty_data_fn+0x15/0x20
[<ffffffff802e279a>] walk_page_buffers+0x8a/0xb0
[<ffffffff802e3590>] ? journal_dirty_data_fn+0x0/0x20
[<ffffffff802e5ddf>] ext3_ordered_writepage+0xef/0x180
[<ffffffff8026da45>] __writepage+0x15/0x50
[<ffffffff8026e0eb>] write_cache_pages+0x26b/0x3c0
[<ffffffff8026da30>] ? __writepage+0x0/0x50
[<ffffffff8026e262>] generic_writepages+0x22/0x30
[<ffffffff8026e2ab>] do_writepages+0x3b/0x40
[<ffffffff802b3bd4>] __writeback_single_inode+0xa4/0x330
[<ffffffff802b432f>] generic_sync_sb_inodes+0x1ff/0x2f0
[<ffffffff802b4445>] sync_sb_inodes+0x25/0x30
[<ffffffff802b46a6>] writeback_inodes+0x96/0xe0
[<ffffffff8026ed2a>] background_writeout+0xaa/0xe0
[<ffffffff8026f330>] ? pdflush+0x0/0x1e0
[<ffffffff8026f43e>] pdflush+0x10e/0x1e0
[<ffffffff8026ec80>] ? background_writeout+0x0/0xe0
[<ffffffff8026f330>] ? pdflush+0x0/0x1e0
[<ffffffff802476bd>] kthread+0x4d/0x80
[<ffffffff8020c628>] child_rip+0xa/0x12
[<ffffffff8020bd13>] ? restore_args+0x0/0x30
[<ffffffff80247816>] ? kthreadd+0x126/0x1b0
[<ffffffff80247670>] ? kthread+0x0/0x80
[<ffffffff8020c61e>] ? child_rip+0x0/0x12


Code: fe 0f 1f 00 48 c7 c2 80 5d 57 80 eb c9 0f 1f 80 00 00 00 00 55 48 89 e5 53 48 89 fb 48 83 ec 08 f0 0f ba 37 00 19 c0 85 c0 75 04 <0f> 0b eb fe e8 90 f1 ff ff 48 89 de 48 89 c7 31 d2 e8 13 10 fe
RIP [<ffffffff80266a37>] unlock_page+0x17/0x40
RSP <ffff81015c697540>
---[ end trace d983269ed03ec2d7 ]---
------------[ cut here ]------------
kernel BUG at mm/filemap.c:575!
invalid opcode: 0000 [2] PREEMPT SMP DEBUG_PAGEALLOC
last sysfs file: /sys/kernel/uevent_seqnum
CPU 0
Modules linked in: ext2 nf_conntrack_irc xt_state iptable_filter ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack ip_tables x_tables usblp uhci_hcd ehci_hcd usbcore sr_mod cdrom
Pid: 19356, comm: growfiles Tainted: G D 2.6.26-rc5-mm1 #4
RIP: 0010:[<ffffffff80266a37>] [<ffffffff80266a37>] unlock_page+0x17/0x40
RSP: 0018:ffff81017e9c3658 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffe20000b1ec58 RCX: 0000000000000034
RDX: 0000000000000000 RSI: ffffe20000b1ec58 RDI: ffffe20000b1ec58
RBP: ffff81017e9c3668 R08: 0000000000000002 R09: 0000000000000001
R10: ffffffff8028b6f1 R11: 0000000000000000 R12: ffffe20000b1ec58
R13: 0000000000000001 R14: ffff81017e9c38b8 R15: ffff81017e9c39d8
FS: 00007fc4c7e1f6f0(0000) GS:ffffffff805ddc80(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000000001cd8028 CR3: 000000017af6d000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process growfiles (pid: 19356, threadinfo ffff81017e9c2000, task ffff81015c790000)
Stack: ffff81017e9c3668 0000000000000000 ffff81017e9c3798 ffffffff802722ce
ffffe200053ab820 ffff81017e9c3758 0000000000000000 0000000000000000
0000000000000000 0000000000000001 ffff81017e9c36d8 0000000000000246
Call Trace:
[<ffffffff802722ce>] shrink_page_list+0x2ce/0x6d0
[<ffffffff80271602>] ? isolate_pages_global+0xf2/0x270
[<ffffffff802728f4>] shrink_list+0x224/0x590
[<ffffffff8026e445>] ? determine_dirtyable_memory+0x15/0x30
[<ffffffff8026e482>] ? get_dirty_limits+0x22/0x2a0
[<ffffffff80272eab>] shrink_zone+0x24b/0x330
[<ffffffff80273407>] try_to_free_pages+0x267/0x3e0
[<ffffffff80271510>] ? isolate_pages_global+0x0/0x270
[<ffffffff8026cf86>] __alloc_pages_internal+0x1b6/0x470
[<ffffffff80266e9a>] __grab_cache_page+0x6a/0xa0
[<ffffffff802e5ba5>] ext3_write_begin+0x65/0x1b0
[<ffffffff802677dd>] generic_file_buffered_write+0x14d/0x740
[<ffffffff80467d40>] ? _spin_unlock+0x30/0x60
[<ffffffff802ac0de>] ? mnt_drop_write+0x7e/0x160
[<ffffffff80268260>] __generic_file_aio_write_nolock+0x2a0/0x460
[<ffffffff80268486>] generic_file_aio_write+0x66/0xd0
[<ffffffff802e1496>] ext3_file_write+0x26/0xc0
[<ffffffff80291fb1>] do_sync_write+0xf1/0x130
[<ffffffff80247ae0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff802a26be>] ? locks_free_lock+0x3e/0x60
[<ffffffff802a3c18>] ? fcntl_setlk+0x58/0x2c0
[<ffffffff8029276a>] vfs_write+0xaa/0xe0
[<ffffffff80292d10>] sys_write+0x50/0x90
[<ffffffff8020b6bb>] system_call_after_swapgs+0x7b/0x80


Code: fe 0f 1f 00 48 c7 c2 80 5d 57 80 eb c9 0f 1f 80 00 00 00 00 55 48 89 e5 53 48 89 fb 48 83 ec 08 f0 0f ba 37 00 19 c0 85 c0 75 04 <0f> 0b eb fe e8 90 f1 ff ff 48 89 de 48 89 c7 31 d2 e8 13 10 fe
RIP [<ffffffff80266a37>] unlock_page+0x17/0x40
RSP <ffff81017e9c3658>
------------[ cut here ]------------
kernel BUG at mm/filemap.c:575!
invalid opcode: 0000 [3] PREEMPT SMP DEBUG_PAGEALLOC
last sysfs file: /sys/kernel/uevent_seqnum
CPU 0
Modules linked in: ext2 nf_conntrack_irc xt_state iptable_filter ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack ip_tables x_tables usblp uhci_hcd ehci_hcd usbcore sr_mod cdrom
Pid: 3749, comm: syslog-ng Tainted: G D 2.6.26-rc5-mm1 #4
RIP: 0010:[<ffffffff80266a37>] [<ffffffff80266a37>] unlock_page+0x17/0x40
RSP: 0018:ffff81017efbd1e8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffe20000d5a798 RCX: 0000000000000034
RDX: 0000000000000000 RSI: ffffe20000d5a798 RDI: ffffe20000d5a798
RBP: ffff81017efbd1f8 R08: 0000000000000002 R09: 0000000000000001
R10: ffffffff8028b6f1 R11: 0000000000000000 R12: ffffe20000d5a798
R13: 0000000000000000 R14: ffff81017efbd448 R15: ffff81017efbd568
FS: 00007f39ccbef6f0(0000) GS:ffffffff805ddc80(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000000001cd8028 CR3: 000000017efb7000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process syslog-ng (pid: 3749, threadinfo ffff81017efbc000, task ffff81017d97b3f0)
Stack: ffff81017efbd1f8 0000000000000000 ffff81017efbd328 ffffffff802722ce
ffffe2000538c6b0 ffff81017efbd2e8 0000000000000000 0000000000000000
0000000000000000 0000000000000001 ffff81017efbd268 0000000000000246
Call Trace:
[<ffffffff802722ce>] shrink_page_list+0x2ce/0x6d0
[<ffffffff80271602>] ? isolate_pages_global+0xf2/0x270
[<ffffffff802728f4>] shrink_list+0x224/0x590
[<ffffffff8026e445>] ? determine_dirtyable_memory+0x15/0x30
[<ffffffff8026e482>] ? get_dirty_limits+0x22/0x2a0
[<ffffffff80272eab>] shrink_zone+0x24b/0x330
[<ffffffff80273407>] try_to_free_pages+0x267/0x3e0
[<ffffffff80271510>] ? isolate_pages_global+0x0/0x270
[<ffffffff8026cf86>] __alloc_pages_internal+0x1b6/0x470
[<ffffffff8026906d>] find_or_create_page+0x4d/0xa0
[<ffffffff802b8c30>] __getblk+0xf0/0x280
[<ffffffff802df4b8>] read_block_bitmap+0x48/0x170
[<ffffffff802e03a6>] ext3_new_blocks+0x1f6/0x620
[<ffffffff802e38c2>] ext3_get_blocks_handle+0x312/0xb60
[<ffffffff8028bcaf>] ? init_object+0x4f/0x90
[<ffffffff8028cf86>] ? __slab_alloc+0xa6/0x660
[<ffffffff8025517d>] ? trace_hardirqs_on+0xd/0x10
[<ffffffff802b7ee7>] ? alloc_buffer_head+0x17/0x90
[<ffffffff802e43a7>] ext3_get_block+0xb7/0x110
[<ffffffff80467d40>] ? _spin_unlock+0x30/0x60
[<ffffffff802b9ed8>] __block_prepare_write+0x268/0x470
[<ffffffff802e42f0>] ? ext3_get_block+0x0/0x110
[<ffffffff802ba176>] block_write_begin+0x56/0xe0
[<ffffffff802e5c02>] ext3_write_begin+0xc2/0x1b0
[<ffffffff802e42f0>] ? ext3_get_block+0x0/0x110
[<ffffffff802677dd>] generic_file_buffered_write+0x14d/0x740
[<ffffffff80467d40>] ? _spin_unlock+0x30/0x60
[<ffffffff802ac0de>] ? mnt_drop_write+0x7e/0x160
[<ffffffff80268260>] __generic_file_aio_write_nolock+0x2a0/0x460
[<ffffffff80268486>] generic_file_aio_write+0x66/0xd0
[<ffffffff802e1496>] ext3_file_write+0x26/0xc0
[<ffffffff80291fb1>] do_sync_write+0xf1/0x130
[<ffffffff80247ae0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff8029276a>] vfs_write+0xaa/0xe0
[<ffffffff80292d10>] sys_write+0x50/0x90
[<ffffffff8020b6bb>] system_call_after_swapgs+0x7b/0x80


Code: fe 0f 1f 00 48 c7 c2 80 5d 57 80 eb c9 0f 1f 80 00 00 00 00 55 48 89 e5 53 48 89 fb 48 83 ec 08 f0 0f ba 37 00 19 c0 85 c0 75 04 <0f> 0b eb fe e8 90 f1 ff ff 48 89 de 48 89 c7 31 d2 e8 13 10 fe
RIP [<ffffffff80266a37>] unlock_page+0x17/0x40
RSP <ffff81017efbd1e8>
---[ end trace d983269ed03ec2d7 ]---
---[ end trace d983269ed03ec2d7 ]---
------------[ cut here ]------------
kernel BUG at mm/filemap.c:575!
invalid opcode: 0000 [4] PREEMPT SMP DEBUG_PAGEALLOC
last sysfs file: /sys/kernel/uevent_seqnum
CPU 0
Modules linked in: ext2 nf_conntrack_irc xt_state iptable_filter ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack ip_tables x_tables usblp uhci_hcd ehci_hcd usbcore sr_mod cdrom
Pid: 19369, comm: growfiles Tainted: G D 2.6.26-rc5-mm1 #4
RIP: 0010:[<ffffffff80266a37>] [<ffffffff80266a37>] unlock_page+0x17/0x40
RSP: 0018:ffff81017e9c3658 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffe200011a9c10 RCX: 0000000000000034
RDX: 0000000000000000 RSI: ffffe200011a9c10 RDI: ffffe200011a9c10
RBP: ffff81017e9c3668 R08: 0000000000000002 R09: 0000000000000001
R10: ffffffff8028b6f1 R11: 0000000000000000 R12: ffffe200011a9c10
R13: 0000000000000001 R14: ffff81017e9c38b8 R15: ffff81017e9c39d8
FS: 00007fcc5d7af6f0(0000) GS:ffffffff805ddc80(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 00007fcc5d31ebf0 CR3: 000000017aea2000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process growfiles (pid: 19369, threadinfo ffff81017e9c2000, task ffff81015c790000)
Stack: ffff81017e9c3668 0000000000000000 ffff81017e9c3798 ffffffff802722ce
ffffe20005370c60 ffff81017e9c3758 0000000000000000 0000000000000000
0000000000000000 0000000000000001 ffff81017e9c36d8 0000000000000246
Call Trace:
[<ffffffff802722ce>] shrink_page_list+0x2ce/0x6d0
[<ffffffff80271602>] ? isolate_pages_global+0xf2/0x270
[<ffffffff802728f4>] shrink_list+0x224/0x590
[<ffffffff8026e445>] ? determine_dirtyable_memory+0x15/0x30
[<ffffffff8026e482>] ? get_dirty_limits+0x22/0x2a0
[<ffffffff80272eab>] shrink_zone+0x24b/0x330
[<ffffffff80273407>] try_to_free_pages+0x267/0x3e0
[<ffffffff80271510>] ? isolate_pages_global+0x0/0x270
[<ffffffff8026cf86>] __alloc_pages_internal+0x1b6/0x470
[<ffffffff80266e9a>] __grab_cache_page+0x6a/0xa0
[<ffffffff802e5ba5>] ext3_write_begin+0x65/0x1b0
[<ffffffff802677dd>] generic_file_buffered_write+0x14d/0x740
[<ffffffff80467d40>] ? _spin_unlock+0x30/0x60
[<ffffffff802ac0de>] ? mnt_drop_write+0x7e/0x160
[<ffffffff80268260>] __generic_file_aio_write_nolock+0x2a0/0x460
[<ffffffff80268486>] generic_file_aio_write+0x66/0xd0
[<ffffffff802e1496>] ext3_file_write+0x26/0xc0
[<ffffffff80291fb1>] do_sync_write+0xf1/0x130
[<ffffffff80247ae0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff802a26be>] ? locks_free_lock+0x3e/0x60
[<ffffffff802a3c18>] ? fcntl_setlk+0x58/0x2c0
[<ffffffff8029276a>] vfs_write+0xaa/0xe0
[<ffffffff80292d10>] sys_write+0x50/0x90
[<ffffffff8020b6bb>] system_call_after_swapgs+0x7b/0x80


Code: fe 0f 1f 00 48 c7 c2 80 5d 57 80 eb c9 0f 1f 80 00 00 00 00 55 48 89 e5 53 48 89 fb 48 83 ec 08 f0 0f ba 37 00 19 c0 85 c0 75 04 <0f> 0b eb fe e8 90 f1 ff ff 48 89 de 48 89 c7 31 d2 e8 13 10 fe
RIP [<ffffffff80266a37>] unlock_page+0x17/0x40
RSP <ffff81017e9c3658>
---[ end trace d983269ed03ec2d7 ]---
------------[ cut here ]------------
kernel BUG at mm/filemap.c:575!
invalid opcode: 0000 [5] PREEMPT SMP DEBUG_PAGEALLOC
last sysfs file: /sys/kernel/uevent_seqnum
CPU 0
Modules linked in: ext2 nf_conntrack_irc xt_state iptable_filter ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack ip_tables x_tables usblp uhci_hcd ehci_hcd usbcore sr_mod cdrom
Pid: 15946, comm: pan Tainted: G D 2.6.26-rc5-mm1 #4
RIP: 0010:[<ffffffff80266a37>] [<ffffffff80266a37>] unlock_page+0x17/0x40
RSP: 0018:ffff81015c799958 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffe20000b020f8 RCX: 0000000000000034
RDX: 0000000000000000 RSI: ffffe20000b020f8 RDI: ffffe20000b020f8
RBP: ffff81015c799968 R08: 0000000000000002 R09: 0000000000000001
R10: ffffffff8028b6f1 R11: 0000000000000000 R12: ffffe20000b020f8
R13: 0000000000000001 R14: ffff81015c799bb8 R15: ffff81015c799cd8
FS: 00007fb10b0e76f0(0000) GS:ffffffff805ddc80(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 00007fb10b0ee0c0 CR3: 000000017cd77000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process pan (pid: 15946, threadinfo ffff81015c798000, task ffff81017e2c5690)
Stack: ffff81015c799968 0000000000000000 ffff81015c799a98 ffffffff802722ce
ffffe200053868d8 ffff81015c799a58 0000000000000000 0000000000000000
0000000000000000 0000000000000001 ffff81015c7999d8 0000000000000246
Call Trace:
[<ffffffff802722ce>] shrink_page_list+0x2ce/0x6d0
[<ffffffff802716a6>] ? isolate_pages_global+0x196/0x270
[<ffffffff802728f4>] shrink_list+0x224/0x590
[<ffffffff8026e445>] ? determine_dirtyable_memory+0x15/0x30
[<ffffffff8026e482>] ? get_dirty_limits+0x22/0x2a0
[<ffffffff80272eab>] shrink_zone+0x24b/0x330
[<ffffffff80273407>] try_to_free_pages+0x267/0x3e0
[<ffffffff80271510>] ? isolate_pages_global+0x0/0x270
[<ffffffff8026cf86>] __alloc_pages_internal+0x1b6/0x470
[<ffffffff8026d257>] __get_free_pages+0x17/0x60
[<ffffffff80230616>] copy_process+0xb6/0x1270
[<ffffffff80231902>] do_fork+0x82/0x280
[<ffffffff802900fb>] ? fd_install+0x5b/0x70
[<ffffffff804674bd>] ? lockdep_sys_exit_thunk+0x35/0x67
[<ffffffff8020b6bb>] ? system_call_after_swapgs+0x7b/0x80
[<ffffffff80209913>] sys_clone+0x23/0x30
[<ffffffff8020ba57>] ptregscall_common+0x67/0xb0


Code: fe 0f 1f 00 48 c7 c2 80 5d 57 80 eb c9 0f 1f 80 00 00 00 00 55 48 89 e5 53 48 89 fb 48 83 ec 08 f0 0f ba 37 00 19 c0 85 c0 75 04 <0f> 0b eb fe e8 90 f1 ff ff 48 89 de 48 89 c7 31 d2 e8 13 10 fe
RIP [<ffffffff80266a37>] unlock_page+0x17/0x40
RSP <ffff81015c799958>
---[ end trace d983269ed03ec2d7 ]---

2008-06-09 21:44:22

by Alexey Dobriyan

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1: kernel BUG at mm/filemap.c:575!

On Tue, Jun 10, 2008 at 12:45:59AM +0400, Alexey Dobriyan wrote:
> This happened after LTP run finished.
>
> ------------[ cut here ]------------
> kernel BUG at mm/filemap.c:575!

Easily reproducible and .config snippets:

CONFIG_64BIT=y
# CONFIG_X86_32 is not set
CONFIG_X86_64=y
CONFIG_X86=y
CONFIG_X86_SMP=y
CONFIG_X86_64_SMP=y
CONFIG_X86_HT=y
CONFIG_SWAP=y
CONFIG_SHMEM=y
CONFIG_VM_EVENT_COUNTERS=y
CONFIG_SLUB_DEBUG=y
CONFIG_SLUB=y

# CONFIG_PROC_PAGE_MONITOR is not set
CONFIG_SLABINFO=y
CONFIG_SMP=y
CONFIG_X86_PC=y
CONFIG_MCORE2=y
CONFIG_GART_IOMMU=y
CONFIG_SWIOTLB=y
CONFIG_IOMMU_HELPER=y
# CONFIG_MAXSMP is not set
CONFIG_NR_CPUS=2
CONFIG_SCHED_MC=y
CONFIG_PREEMPT=y
CONFIG_PREEMPT_RCU=y
CONFIG_ARCH_SPARSEMEM_DEFAULT=y
CONFIG_ARCH_SPARSEMEM_ENABLE=y
CONFIG_ARCH_SELECT_MEMORY_MODEL=y
CONFIG_ILLEGAL_POINTER_VALUE=0xffffc10000000000
CONFIG_SELECT_MEMORY_MODEL=y
# CONFIG_FLATMEM_MANUAL is not set
# CONFIG_DISCONTIGMEM_MANUAL is not set
CONFIG_SPARSEMEM_MANUAL=y
CONFIG_SPARSEMEM=y
CONFIG_HAVE_MEMORY_PRESENT=y
# CONFIG_SPARSEMEM_STATIC is not set
CONFIG_SPARSEMEM_EXTREME=y
CONFIG_SPARSEMEM_VMEMMAP_ENABLE=y
CONFIG_SPARSEMEM_VMEMMAP=y
# CONFIG_MEMORY_HOTPLUG is not set
CONFIG_PAGEFLAGS_EXTENDED=y
CONFIG_SPLIT_PTLOCK_CPUS=4
CONFIG_RESOURCES_64BIT=y
CONFIG_ZONE_DMA_FLAG=1
CONFIG_BOUNCE=y
CONFIG_VIRT_TO_BUS=y
# CONFIG_NORECLAIM_LRU is not set
CONFIG_MTRR=y
# CONFIG_MTRR_SANITIZER is not set
CONFIG_X86_PAT=y
CONFIG_HZ=1000
CONFIG_SCHED_HRTICK=y

CONFIG_EXT3_FS=y
CONFIG_JBD=y
CONFIG_TMPFS=y

CONFIG_TRACE_IRQFLAGS_SUPPORT=y
CONFIG_PRINTK_TIME=y
CONFIG_DEBUG_KERNEL=y
CONFIG_DEBUG_SHIRQ=y
CONFIG_DETECT_SOFTLOCKUP=y
CONFIG_DEBUG_OBJECTS=y
CONFIG_DEBUG_OBJECTS_FREE=y
CONFIG_DEBUG_OBJECTS_TIMERS=y
CONFIG_SLUB_DEBUG_ON=y
CONFIG_DEBUG_PREEMPT=y
CONFIG_DEBUG_RT_MUTEXES=y
CONFIG_DEBUG_PI_LIST=y
CONFIG_DEBUG_SPINLOCK=y
CONFIG_DEBUG_MUTEXES=y
CONFIG_DEBUG_LOCK_ALLOC=y
CONFIG_PROVE_LOCKING=y
CONFIG_LOCKDEP=y
CONFIG_TRACE_IRQFLAGS=y
CONFIG_DEBUG_SPINLOCK_SLEEP=y
CONFIG_STACKTRACE=y
CONFIG_DEBUG_BUGVERBOSE=y
CONFIG_DEBUG_VM=y
CONFIG_DEBUG_WRITECOUNT=y
CONFIG_DEBUG_MEMORY_INIT=y
CONFIG_DEBUG_LIST=y
CONFIG_DEBUG_SG=y
CONFIG_FRAME_POINTER=y
CONFIG_HAVE_FTRACE=y
CONFIG_HAVE_DYNAMIC_FTRACE=y
CONFIG_DEBUG_PAGEALLOC=y
CONFIG_DEBUG_PER_CPU_MAPS=y
CONFIG_DEBUG_RODATA=y

2008-06-09 21:48:57

by Andrew Morton

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1

On Mon, 9 Jun 2008 21:14:54 +0200
Mariusz Kozlowski <[email protected]> wrote:

> Hello Balbir,
>
> > Andrew Morton wrote:
> > > Temporarily at
> > >
> > > http://userweb.kernel.org/~akpm/2.6.26-rc5-mm1/
> > >
> >
> > I've hit a segfault, the last few lines on my console are
> >
> >
> > Testing -fstack-protector-all feature
> > registered taskstats version 1
> > debug: unmapping init memory ffffffff80c03000..ffffffff80dd8000
> > init[1]: segfault at 7fff701fe880 ip 7fff701fee5e sp 7fff7006e6d0 error 7
> >
> > With absolutely no stack trace. I'll dig deeper.
>
> Hey, I see something similar and I actually have a stack trace. Here it goes:
>
> bash[498] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fffa3d010f0 error 7
> init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fff9e97f640 error 7
> init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fff9e97eed0 error 7
> Kernel panic - not syncing: Attemted to kill init!
> Pid 1, comm: init Not tainted 2.6.26-rc5-mm1 #1
>
> Call Trace:
> [<ffffffff80254632>] panic+0xe2/0x260
> [<ffffffff802fa8ba>] ? __slab_free+0x10a/0x630
> [<ffffffff80265a8e>] ? __sigqueue_free+0x5e/0x70
> [<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
> [<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
> [<ffffffff80259b54>] do_exit+0xb84/0xc30
> [<ffffffff80259c5a>] do_group_exit+0x5a/0x110
> [<ffffffff8026a3b5>] get_signal_to_deliver+0x2c5/0x620
> [<ffffffff8020bb3b>] do_notify_resume+0x11b/0xd10
> [<ffffffff8028da5b>] ? trace_hardirqs_on+0x1b/0x30
> [<ffffffff805cd0f3>] ? _spin_unlock_irqrestore+0x93/0x130
> [<ffffffff8026865c>] ? force_sig_info+0x10c/0x130
> [<ffffffff8022fb9c>] ? force_sig_info_fault+0x2c/0x40
> [<ffffffff802dd7dd>] ? print_vma_addr+0x10d/0x1d0
> [<ffffffff805cbb67>] ? trace_hardirqs_on_thunk+0x3a/0x3f
> [<ffffffff8028d8da>] ? trace_hardirqs_on_caller+0x15a/0x2c0
> [<ffffffff8020d4c9>] retint_signal+0x46/0x8d
>
> This was copied manually so typos are possible.
>

Thanks. Could someone send a config please? Or a bisection result ;)

2008-06-09 22:01:05

by Andrew Morton

[permalink] [raw]
Subject: Re: [BUG] 2.6.26-rc5-mm1- kernel BUG at arch/x86/kernel/io_apic_64.c:355!

On Mon, 09 Jun 2008 23:01:36 +0530
Kamalesh Babulal <[email protected]> wrote:

> Hi Andrew,
>
> The 2.6.26-rc5-mm1 kernel panics while bootup on 32 way, x86_64 machine.
> passing noapic as the command line parameter, boots up
> the machine fine.
>
> kernel BUG at arch/x86/kernel/io_apic_64.c:355!
> invalid opcode: 0000 [1] SMP
> last sysfs file:
> CPU 24
> Modules linked in:
> Pid: 1, comm: swapper Not tainted 2.6.26-rc5-mm1-autotest #1
> RIP: 0010:[<ffffffff8021b9da>] [<ffffffff8021b9da>] add_pin_to_irq+0x7a/0x90
> RSP: 0018:ffff81061e4cbb60 EFLAGS: 00010216
> RAX: 00000000000000f0 RBX: 00000000000000f0 RCX: 0000000000000001
> RDX: 0000000000000018 RSI: 0000000000000006 RDI: 00000000000000f0
> RBP: 0000000000000006 R08: 0000000000000018 R09: 0000000000000006
> R10: 0000000000000008 R11: ffffffff803948e6 R12: 0000000000000001
> R13: 0000000000000001 R14: 0000000000000018 R15: ffff81061e4cbc04
> FS: 0000000000000000(0000) GS:ffff810bfe7be5c0(0000) knlGS:0000000000000000
> CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
> CR2: 0000000000000000 CR3: 0000000000201000 CR4: 00000000000006e0
> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> Process swapper (pid: 1, threadinfo ffff81061e4ca000, task ffff81032e4b96d0)
> Stack: 0000000000000006 ffffffff8021ba6e 00000000000000f0 0000000000000001
> 0000000000000000 0000000000000000 ffff81061e4cbc00 ffffffff80218991
> 00000000000000f0 0000000000000000 0000000000000001 ffffffff80218a1a
> Call Trace:
> [<ffffffff8021ba6e>] io_apic_set_pci_routing+0x7e/0xb0
> [<ffffffff80218991>] mp_register_gsi+0xb1/0xd0
> [<ffffffff80218a1a>] acpi_register_gsi+0x6a/0x70
> [<ffffffff80394b20>] acpi_pci_irq_enable+0x14f/0x220
> [<ffffffff803948e6>] acpi_pci_allocate_irq+0x0/0x4c
> [<ffffffff8036e14a>] do_pci_enable_device+0x4a/0x70
> [<ffffffff8036e1c1>] __pci_enable_device_flags+0x51/0x60
> [<ffffffff804f1608>] tg3_init_one+0x58/0x1640
> [<ffffffff80229790>] default_wake_function+0x0/0x10
> [<ffffffff8022e942>] set_cpus_allowed_ptr+0xc2/0xf0
> [<ffffffff803703b7>] pci_device_probe+0xe7/0x130
> [<ffffffff803c38b6>] driver_probe_device+0x96/0x1a0
> [<ffffffff803c3a49>] __driver_attach+0x89/0x90
> [<ffffffff803c39c0>] __driver_attach+0x0/0x90
> [<ffffffff803c2dbd>] bus_for_each_dev+0x4d/0x80
> [<ffffffff8028f708>] kmem_cache_alloc+0xc8/0xf0
> [<ffffffff803c341e>] bus_add_driver+0xae/0x220
> [<ffffffff803c3cd6>] driver_register+0x56/0x130
> [<ffffffff80370678>] __pci_register_driver+0x68/0xb0
> [<ffffffff806e5060>] tg3_init+0x0/0x20
> [<ffffffff806c8a63>] kernel_init+0x153/0x320
> [<ffffffff8020c378>] child_rip+0xa/0x12
> [<ffffffff806c8910>] kernel_init+0x0/0x320
> [<ffffffff8020c36e>] child_rip+0x0/0x12
>
>
> Code: 89 05 27 88 43 00 7f 29 48 0f bf c1 48 8d 14 00 48 c1 e0 03 48 29 d0 48 8d 90 00 44 74 80 66 89 32 66 44 89 42 02 48 83 c4 08 c3 <0f> 0b eb fe 66 90 48 c7 c7 08 7d 5e 80 31 c0 e8 72 7b 01 00 66
> RIP [<ffffffff8021b9da>] add_pin_to_irq+0x7a/0x90
> RSP <ffff81061e4cbb60>
> ---[ end trace 5a53b6247c28d358 ]---

Here:

static void add_pin_to_irq(unsigned int irq, int apic, int pin)
{
static int first_free_entry = NR_IRQS;
struct irq_pin_list *entry = irq_2_pin + irq;

BUG_ON(irq >= NR_IRQS);


There are massive changes to tg3, massive changes in the relevant x86
ACPI code and massive changes everywhere else.

So I don't have a clue who broke it, but it wasn't me!

You're testing linux-next, aren't you. Did you test the June 6 tree,
upon which 2.6.26-rc5-mm1 was based?

Thanks.

2008-06-09 22:12:37

by Byron Bradley

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1

I'm getting the error below when compiling for ARM (Marvell Orion 5x) but
having trouble working out exacty why. It looks like it isn't selecting
any of the CONFIG_UWB* options which USB_WHCI_HCD should select. Config is
attached.

LD .tmp_vmlinux1
drivers/built-in.o: In function `asl_stop':
dm-kcopyd.c:(.text+0x1e31c4): undefined reference to `whci_wait_for'
drivers/built-in.o: In function `asl_start':
dm-kcopyd.c:(.text+0x1e32b8): undefined reference to `whci_wait_for'
drivers/built-in.o: In function `whc_remove':
dm-kcopyd.c:(.text+0x1e413c): undefined reference to `uwb_rc_put'
drivers/built-in.o: In function `whc_stop':
dm-kcopyd.c:(.text+0x1e44c4): undefined reference to `whci_wait_for'
drivers/built-in.o: In function `whc_probe':
dm-kcopyd.c:(.text+0x1e47a8): undefined reference to `uwb_rc_get_by_grandpa'
dm-kcopyd.c:(.text+0x1e4860): undefined reference to `uwb_rc_put'
drivers/built-in.o: In function `whc_init':
dm-kcopyd.c:(.text+0x1e5eac): undefined reference to `whci_wait_for'
drivers/built-in.o: In function `pzl_stop':
dm-kcopyd.c:(.text+0x1e70ec): undefined reference to `whci_wait_for'
drivers/built-in.o: In function `pzl_start':
dm-kcopyd.c:(.text+0x1e771c): undefined reference to `whci_wait_for'
drivers/built-in.o: In function `whc_set_key':
dm-kcopyd.c:(.text+0x1ead84): undefined reference to `whci_wait_for'
drivers/built-in.o: In function `whc_update_di':
dm-kcopyd.c:(.text+0x1eb1d4): undefined reference to `whci_wait_for'
drivers/built-in.o: In function `hwahc_destroy':
dm-kcopyd.c:(.text+0x20beb8): undefined reference to `uwb_rc_put'
drivers/built-in.o: In function `hwahc_probe':
dm-kcopyd.c:(.text+0x20d2e4): undefined reference to `uwb_rc_get_by_grandpa'
dm-kcopyd.c:(.text+0x20d43c): undefined reference to `uwb_rc_put'
drivers/built-in.o: In function `wusb_crypto_init':
dm-kcopyd.c:(.text+0x2108dc): undefined reference to `dump_bytes'
dm-kcopyd.c:(.text+0x210928): undefined reference to `dump_bytes'
dm-kcopyd.c:(.text+0x210974): undefined reference to `dump_bytes'
dm-kcopyd.c:(.text+0x2109c4): undefined reference to `dump_bytes'
dm-kcopyd.c:(.text+0x210aa0): undefined reference to `dump_bytes'
drivers/built-in.o:dm-kcopyd.c:(.text+0x210aec): more undefined references to `dump_bytes' follow
drivers/built-in.o: In function `wusbhc_pal_unregister':
dm-kcopyd.c:(.text+0x217370): undefined reference to `uwb_pal_unregister'
drivers/built-in.o: In function `wusbhc_pal_register':
dm-kcopyd.c:(.text+0x2173c8): undefined reference to `uwb_pal_init'
dm-kcopyd.c:(.text+0x2173e4): undefined reference to `uwb_pal_register'
drivers/built-in.o: In function `wusbhc_rsv_terminate':
dm-kcopyd.c:(.text+0x218700): undefined reference to `uwb_rsv_terminate'
drivers/built-in.o: In function `wusbhc_rsv_establish':
dm-kcopyd.c:(.text+0x21875c): undefined reference to `uwb_rsv_create'
dm-kcopyd.c:(.text+0x2187b4): undefined reference to `uwb_rsv_establish'
dm-kcopyd.c:(.text+0x218808): undefined reference to `uwb_rsv_destroy'
drivers/built-in.o: In function `wusb_dev_4way_handshake':
dm-kcopyd.c:(.text+0x21ae90): undefined reference to `dump_bytes'
dm-kcopyd.c:(.text+0x21af48): undefined reference to `dump_bytes'
dm-kcopyd.c:(.text+0x21b0a4): undefined reference to `dump_bytes'
dm-kcopyd.c:(.text+0x21b3a4): undefined reference to `dump_bytes'
dm-kcopyd.c:(.text+0x21b7ec): undefined reference to `dump_bytes'
drivers/built-in.o:dm-kcopyd.c:(.text+0x21c0e4): more undefined references to `dump_bytes' follow
drivers/built-in.o: In function `whci_hc_driver_init':
dm-kcopyd.c:(.init.text+0x98a0): undefined reference to `__umc_driver_register'
make[1]: *** [.tmp_vmlinux1] Error 1
make: *** [sub-make] Error 2


Cheers,

--
Byron Bradley


Attachments:
.config (40.61 kB)

2008-06-09 22:36:39

by Jiri Slaby

[permalink] [raw]
Subject: sock lockup -> process in D state [Was: 2.6.26-rc5-mm1]

On 06/09/2008 02:39 PM, Andrew Morton wrote:
> ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.26-rc5/2.6.26-rc5-mm1/

I don't know how to reproduce it so far, but posting anyway:

httpd2-prefor D 00000000ffffffff 0 3697 2811
ffff810055bd7198 0000000000000046 ffff810055bd7160 ffff810055bd715c
ffffffff80728000 ffff810063896700 ffff81007d093380 ffff810063896980
00000001781e1700 00000001005585a6 ffff810063896980 0000000000000600
Call Trace:
[<ffffffff8049d6fd>] lock_sock_nested+0x8d/0xd0
[<ffffffff8024e010>] ? autoremove_wake_function+0x0/0x40
[<ffffffff8049a00c>] sock_fasync+0x4c/0x180
[<ffffffff8049b4ad>] sock_close+0x1d/0x40
[<ffffffff802a6314>] __fput+0xc4/0x1a0
[<ffffffff802a640d>] fput+0x1d/0x30
[<ffffffff802a2b9b>] filp_close+0x5b/0x90
[<ffffffff802399e9>] put_files_struct+0x79/0xe0
[<ffffffff80239a9e>] exit_files+0x4e/0x60
[<ffffffff8023bc44>] do_exit+0x6e4/0x7f0
[<ffffffff8022cade>] ? __wake_up+0x4e/0x70
[<ffffffff8054bd18>] oops_end+0x88/0x90
[<ffffffff8020e0be>] die+0x5e/0x90
[<ffffffff8054c386>] do_trap+0x146/0x170
[<ffffffff8054e3e5>] ? atomic_notifier_call_chain+0x15/0x20
[<ffffffff8020e7b2>] do_invalid_op+0x92/0xb0
[<ffffffff80277ec7>] ? unlock_page+0x17/0x40
[<ffffffff8029ee95>] ? check_object+0x265/0x270
[<ffffffff8029e6c0>] ? init_object+0x50/0x90
[<ffffffff8054b739>] error_exit+0x0/0x51
[<ffffffff80277ec7>] ? unlock_page+0x17/0x40
[<ffffffff80277edd>] ? unlock_page+0x2d/0x40
[<ffffffff8028386d>] ? shrink_page_list+0x2fd/0x720
[<ffffffff80282ad3>] ? isolate_pages_global+0x1c3/0x270
[<ffffffff80283ed0>] ? shrink_list+0x240/0x5e0
[<ffffffff8029e6c0>] ? init_object+0x50/0x90
[<ffffffff802844c3>] ? shrink_zone+0x253/0x330
[<ffffffff80280060>] ? background_writeout+0x0/0xe0
[<ffffffff80285441>] ? try_to_free_pages+0x251/0x3e0
[<ffffffff80282910>] ? isolate_pages_global+0x0/0x270
[<ffffffff8027e8ff>] ? __alloc_pages_internal+0x20f/0x4e0
[<ffffffff802a0e04>] ? __slab_alloc+0x6d4/0x6f0
[<ffffffff804d1521>] ? sk_stream_alloc_skb+0x41/0x110
[<ffffffff804d1521>] ? sk_stream_alloc_skb+0x41/0x110
[<ffffffff802a2033>] ? __kmalloc_track_caller+0xc3/0xf0
[<ffffffff804a2b4e>] ? __alloc_skb+0x6e/0x150
[<ffffffff804d1521>] ? sk_stream_alloc_skb+0x41/0x110
[<ffffffff804d1960>] ? tcp_sendmsg+0x370/0xc30
[<ffffffff80499b07>] ? sock_aio_write+0x137/0x150
[<ffffffff802bb711>] ? touch_atime+0x31/0x140
[<ffffffff804999d0>] ? sock_aio_write+0x0/0x150
[<ffffffff802a4bcb>] ? do_sync_readv_writev+0xeb/0x130
[<ffffffff802aceb1>] ? pipe_read+0x4b1/0x4c0
[<ffffffff8024e010>] ? autoremove_wake_function+0x0/0x40
[<ffffffff802a4e41>] ? do_sync_read+0xf1/0x140
[<ffffffff802a49de>] ? rw_copy_check_uvector+0x7e/0x130
[<ffffffff802a538f>] ? do_readv_writev+0xcf/0x1e0
[<ffffffff802d985b>] ? sys_epoll_wait+0xcb/0x560
[<ffffffff802a54e0>] ? vfs_writev+0x40/0x60
[<ffffffff802a5550>] ? sys_writev+0x50/0xb0
[<ffffffff8020c42b>] ? system_call_after_swapgs+0x7b/0x80

2008-06-09 22:43:27

by Andrew Morton

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1: kernel BUG at mm/filemap.c:575!

On Tue, 10 Jun 2008 00:45:59 +0400
Alexey Dobriyan <[email protected]> wrote:

> This happened after LTP run finished.
>
> ------------[ cut here ]------------
> kernel BUG at mm/filemap.c:575!
> invalid opcode: 0000 [1] PREEMPT SMP DEBUG_PAGEALLOC
> last sysfs file: /sys/kernel/uevent_seqnum
> CPU 1
> Modules linked in: ext2 nf_conntrack_irc xt_state iptable_filter ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack ip_tables x_tables usblp uhci_hcd ehci_hcd usbcore sr_mod cdrom
> Pid: 19327, comm: pdflush Not tainted 2.6.26-rc5-mm1 #4
> RIP: 0010:[<ffffffff80266a37>] [<ffffffff80266a37>] unlock_page+0x17/0x40
> RSP: 0018:ffff81015c697540 EFLAGS: 00010246
> RAX: 0000000000000000 RBX: ffffe20000e38c08 RCX: 0000000000000034
> RDX: 0000000000000000 RSI: ffffe20000e38c08 RDI: ffffe20000e38c08
> RBP: ffff81015c697550 R08: 0000000000000002 R09: 000000000007794e
> R10: ffffffff8028b6f1 R11: 0000000000000001 R12: ffffe20000e38c08
> R13: 0000000000000000 R14: ffff81015c6977a0 R15: ffff81015c6978c0
> FS: 0000000000000000(0000) GS:ffff81017f845320(0000) knlGS:0000000000000000
> CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
> CR2: 00007fb64f84f020 CR3: 0000000000201000 CR4: 00000000000006e0
> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> Process pdflush (pid: 19327, threadinfo ffff81015c696000, task ffff81015c795690)
> Stack: ffff81015c697550 0000000000000000 ffff81015c697680 ffffffff802722ce
> ffffe20005367df8 ffff81015c697640 0000000000000000 0000000000000001
> 0000000000000001 0000000000000001 ffffe20000b02d38 ffffe20001274970
> Call Trace:
> [<ffffffff802722ce>] shrink_page_list+0x2ce/0x6d0
> [<ffffffff80254f37>] ? mark_held_locks+0x47/0x90
> [<ffffffff8025517d>] ? trace_hardirqs_on+0xd/0x10
> [<ffffffff802550e9>] ? trace_hardirqs_on_caller+0xc9/0x150
> [<ffffffff802728f4>] shrink_list+0x224/0x590
> [<ffffffff80272eab>] shrink_zone+0x24b/0x330
> [<ffffffff80273407>] try_to_free_pages+0x267/0x3e0
>
> ...
>

We unlocked an already-unlocked page.

Although pretty straightforward, shrink_page_list() is, umm, large.

This part:

if (PagePrivate(page)) {
if (!try_to_release_page(page, sc->gfp_mask))
goto activate_locked;
if (!mapping && page_count(page) == 1) {
unlock_page(page);
if (put_page_testzero(page))
goto free_it;
else {
nr_reclaimed++;
continue;
}
}
}

if (!mapping || !__remove_mapping(mapping, page))
goto keep_locked;

free_it:
unlock_page(page);

has a very obvious double-unlock. It was added by the obviously-buggy,
reviewed-by-everyone mm-speculative-page-references.patch - part of
Nick's lockless pagecache work.

argh. This means that I need to a) stop merging anything and b) be
sent a fix really fast or drop them all and fix up all the fallout and
c) get -mm2 out asap to that someone can test all the other
page-reclaim changes. argh.

Also, what's up with that "continue" which got added there? We just
leave the page floating about without reattaching it to any LRU?
Where's the code comment explaining wth is going on in there?

More argh.

2008-06-09 23:02:21

by Andrew Morton

[permalink] [raw]
Subject: Re: sock lockup -> process in D state [Was: 2.6.26-rc5-mm1]

On Tue, 10 Jun 2008 00:33:01 +0200
Jiri Slaby <[email protected]> wrote:

> On 06/09/2008 02:39 PM, Andrew Morton wrote:
> > ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.26-rc5/2.6.26-rc5-mm1/
>
> I don't know how to reproduce it so far, but posting anyway:
>
> httpd2-prefor D 00000000ffffffff 0 3697 2811
> ffff810055bd7198 0000000000000046 ffff810055bd7160 ffff810055bd715c
> ffffffff80728000 ffff810063896700 ffff81007d093380 ffff810063896980
> 00000001781e1700 00000001005585a6 ffff810063896980 0000000000000600
> Call Trace:
> [<ffffffff8049d6fd>] lock_sock_nested+0x8d/0xd0
> [<ffffffff8024e010>] ? autoremove_wake_function+0x0/0x40
> [<ffffffff8049a00c>] sock_fasync+0x4c/0x180
> [<ffffffff8049b4ad>] sock_close+0x1d/0x40
> [<ffffffff802a6314>] __fput+0xc4/0x1a0
> [<ffffffff802a640d>] fput+0x1d/0x30
> [<ffffffff802a2b9b>] filp_close+0x5b/0x90
> [<ffffffff802399e9>] put_files_struct+0x79/0xe0
> [<ffffffff80239a9e>] exit_files+0x4e/0x60
> [<ffffffff8023bc44>] do_exit+0x6e4/0x7f0
> [<ffffffff8022cade>] ? __wake_up+0x4e/0x70
> [<ffffffff8054bd18>] oops_end+0x88/0x90
> [<ffffffff8020e0be>] die+0x5e/0x90
> [<ffffffff8054c386>] do_trap+0x146/0x170
> [<ffffffff8054e3e5>] ? atomic_notifier_call_chain+0x15/0x20
> [<ffffffff8020e7b2>] do_invalid_op+0x92/0xb0
> [<ffffffff80277ec7>] ? unlock_page+0x17/0x40
> [<ffffffff8029ee95>] ? check_object+0x265/0x270
> [<ffffffff8029e6c0>] ? init_object+0x50/0x90
> [<ffffffff8054b739>] error_exit+0x0/0x51
> [<ffffffff80277ec7>] ? unlock_page+0x17/0x40
> [<ffffffff80277edd>] ? unlock_page+0x2d/0x40
> [<ffffffff8028386d>] ? shrink_page_list+0x2fd/0x720
> [<ffffffff80282ad3>] ? isolate_pages_global+0x1c3/0x270
> [<ffffffff80283ed0>] ? shrink_list+0x240/0x5e0
> [<ffffffff8029e6c0>] ? init_object+0x50/0x90
> [<ffffffff802844c3>] ? shrink_zone+0x253/0x330
> [<ffffffff80280060>] ? background_writeout+0x0/0xe0
> [<ffffffff80285441>] ? try_to_free_pages+0x251/0x3e0
> [<ffffffff80282910>] ? isolate_pages_global+0x0/0x270
> [<ffffffff8027e8ff>] ? __alloc_pages_internal+0x20f/0x4e0
> [<ffffffff802a0e04>] ? __slab_alloc+0x6d4/0x6f0
> [<ffffffff804d1521>] ? sk_stream_alloc_skb+0x41/0x110
> [<ffffffff804d1521>] ? sk_stream_alloc_skb+0x41/0x110
> [<ffffffff802a2033>] ? __kmalloc_track_caller+0xc3/0xf0
> [<ffffffff804a2b4e>] ? __alloc_skb+0x6e/0x150
> [<ffffffff804d1521>] ? sk_stream_alloc_skb+0x41/0x110
> [<ffffffff804d1960>] ? tcp_sendmsg+0x370/0xc30
> [<ffffffff80499b07>] ? sock_aio_write+0x137/0x150
> [<ffffffff802bb711>] ? touch_atime+0x31/0x140
> [<ffffffff804999d0>] ? sock_aio_write+0x0/0x150
> [<ffffffff802a4bcb>] ? do_sync_readv_writev+0xeb/0x130
> [<ffffffff802aceb1>] ? pipe_read+0x4b1/0x4c0
> [<ffffffff8024e010>] ? autoremove_wake_function+0x0/0x40
> [<ffffffff802a4e41>] ? do_sync_read+0xf1/0x140
> [<ffffffff802a49de>] ? rw_copy_check_uvector+0x7e/0x130
> [<ffffffff802a538f>] ? do_readv_writev+0xcf/0x1e0
> [<ffffffff802d985b>] ? sys_epoll_wait+0xcb/0x560
> [<ffffffff802a54e0>] ? vfs_writev+0x40/0x60
> [<ffffffff802a5550>] ? sys_writev+0x50/0xb0
> [<ffffffff8020c42b>] ? system_call_after_swapgs+0x7b/0x80

Looks like it tried to go BUG then deadlocked. Didn't it print BUG
stuff into the logs?

And I'd guess that you hit the unlock_page() BUG (Subject: Re:
2.6.26-rc5-mm1: kernel BUG at mm/filemap.c:575!).

This bug means that rc5-mm1 is toast, sorry.

2008-06-10 02:21:26

by Nick Piggin

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1: kernel BUG at mm/filemap.c:575!

On Tuesday 10 June 2008 08:37, Andrew Morton wrote:
> On Tue, 10 Jun 2008 00:45:59 +0400
>
> Alexey Dobriyan <[email protected]> wrote:
> > This happened after LTP run finished.
> >
> > ------------[ cut here ]------------
> > kernel BUG at mm/filemap.c:575!
> > invalid opcode: 0000 [1] PREEMPT SMP DEBUG_PAGEALLOC
> > last sysfs file: /sys/kernel/uevent_seqnum
> > CPU 1
> > Modules linked in: ext2 nf_conntrack_irc xt_state iptable_filter
> > ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack
> > ip_tables x_tables usblp uhci_hcd ehci_hcd usbcore sr_mod cdrom Pid:
> > 19327, comm: pdflush Not tainted 2.6.26-rc5-mm1 #4
> > RIP: 0010:[<ffffffff80266a37>] [<ffffffff80266a37>]
> > unlock_page+0x17/0x40 RSP: 0018:ffff81015c697540 EFLAGS: 00010246
> > RAX: 0000000000000000 RBX: ffffe20000e38c08 RCX: 0000000000000034
> > RDX: 0000000000000000 RSI: ffffe20000e38c08 RDI: ffffe20000e38c08
> > RBP: ffff81015c697550 R08: 0000000000000002 R09: 000000000007794e
> > R10: ffffffff8028b6f1 R11: 0000000000000001 R12: ffffe20000e38c08
> > R13: 0000000000000000 R14: ffff81015c6977a0 R15: ffff81015c6978c0
> > FS: 0000000000000000(0000) GS:ffff81017f845320(0000)
> > knlGS:0000000000000000 CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
> > CR2: 00007fb64f84f020 CR3: 0000000000201000 CR4: 00000000000006e0
> > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> > DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> > Process pdflush (pid: 19327, threadinfo ffff81015c696000, task
> > ffff81015c795690) Stack: ffff81015c697550 0000000000000000
> > ffff81015c697680 ffffffff802722ce ffffe20005367df8 ffff81015c697640
> > 0000000000000000 0000000000000001 0000000000000001 0000000000000001
> > ffffe20000b02d38 ffffe20001274970 Call Trace:
> > [<ffffffff802722ce>] shrink_page_list+0x2ce/0x6d0
> > [<ffffffff80254f37>] ? mark_held_locks+0x47/0x90
> > [<ffffffff8025517d>] ? trace_hardirqs_on+0xd/0x10
> > [<ffffffff802550e9>] ? trace_hardirqs_on_caller+0xc9/0x150
> > [<ffffffff802728f4>] shrink_list+0x224/0x590
> > [<ffffffff80272eab>] shrink_zone+0x24b/0x330
> > [<ffffffff80273407>] try_to_free_pages+0x267/0x3e0
> >
> > ...
>
> We unlocked an already-unlocked page.
>
> Although pretty straightforward, shrink_page_list() is, umm, large.
>
> This part:
>
> if (PagePrivate(page)) {
> if (!try_to_release_page(page, sc->gfp_mask))
> goto activate_locked;
> if (!mapping && page_count(page) == 1) {
> unlock_page(page);
> if (put_page_testzero(page))
> goto free_it;
> else {
> nr_reclaimed++;
> continue;
> }
> }
> }
>
> if (!mapping || !__remove_mapping(mapping, page))
> goto keep_locked;
>
> free_it:
> unlock_page(page);
>
> has a very obvious double-unlock. It was added by the obviously-buggy,
> reviewed-by-everyone mm-speculative-page-references.patch - part of
> Nick's lockless pagecache work.

Dang, I missed this hunk when porting up the patches. free_it obviously
should be below the unlock_page. Sorry bout that.


> argh. This means that I need to a) stop merging anything and b) be
> sent a fix really fast or drop them all and fix up all the fallout and
> c) get -mm2 out asap to that someone can test all the other
> page-reclaim changes. argh.
>
> Also, what's up with that "continue" which got added there? We just
> leave the page floating about without reattaching it to any LRU?
> Where's the code comment explaining wth is going on in there?

Attached.


Attachments:
(No filename) (3.41 kB)
mm-speculative-get_page-hugh-fix2.patch (1.14 kB)
Download all attachments

2008-06-10 04:57:22

by Mariusz Kozlowski

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1

Witam,

> On Mon, 9 Jun 2008 21:14:54 +0200
> Mariusz Kozlowski <[email protected]> wrote:
>
> > Hello Balbir,
> >
> > > Andrew Morton wrote:
> > > > Temporarily at
> > > >
> > > > http://userweb.kernel.org/~akpm/2.6.26-rc5-mm1/
> > > >
> > >
> > > I've hit a segfault, the last few lines on my console are
> > >
> > >
> > > Testing -fstack-protector-all feature
> > > registered taskstats version 1
> > > debug: unmapping init memory ffffffff80c03000..ffffffff80dd8000
> > > init[1]: segfault at 7fff701fe880 ip 7fff701fee5e sp 7fff7006e6d0 error 7
> > >
> > > With absolutely no stack trace. I'll dig deeper.
> >
> > Hey, I see something similar and I actually have a stack trace. Here it goes:
> >
> > bash[498] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fffa3d010f0 error 7
> > init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fff9e97f640 error 7
> > init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fff9e97eed0 error 7
> > Kernel panic - not syncing: Attemted to kill init!
> > Pid 1, comm: init Not tainted 2.6.26-rc5-mm1 #1
> >
> > Call Trace:
> > [<ffffffff80254632>] panic+0xe2/0x260
> > [<ffffffff802fa8ba>] ? __slab_free+0x10a/0x630
> > [<ffffffff80265a8e>] ? __sigqueue_free+0x5e/0x70
> > [<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
> > [<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
> > [<ffffffff80259b54>] do_exit+0xb84/0xc30
> > [<ffffffff80259c5a>] do_group_exit+0x5a/0x110
> > [<ffffffff8026a3b5>] get_signal_to_deliver+0x2c5/0x620
> > [<ffffffff8020bb3b>] do_notify_resume+0x11b/0xd10
> > [<ffffffff8028da5b>] ? trace_hardirqs_on+0x1b/0x30
> > [<ffffffff805cd0f3>] ? _spin_unlock_irqrestore+0x93/0x130
> > [<ffffffff8026865c>] ? force_sig_info+0x10c/0x130
> > [<ffffffff8022fb9c>] ? force_sig_info_fault+0x2c/0x40
> > [<ffffffff802dd7dd>] ? print_vma_addr+0x10d/0x1d0
> > [<ffffffff805cbb67>] ? trace_hardirqs_on_thunk+0x3a/0x3f
> > [<ffffffff8028d8da>] ? trace_hardirqs_on_caller+0x15a/0x2c0
> > [<ffffffff8020d4c9>] retint_signal+0x46/0x8d
> >
> > This was copied manually so typos are possible.
> >
>
> Thanks. Could someone send a config please? Or a bisection result ;)

In my case it turns out to be gcov patches - in which I'm interested
in to see (and play with) the tests coverage.

#
# gcov
#
kernel-call-constructors.patch
kernel-introduce-gcc_version_lower-macro.patch
seq_file-add-function-to-write-binary-data.patch
GOOD
gcov-add-gcov-profiling-infrastructure.patch
GOOD
gcov-create-links-to-gcda-files-in-build-directory.patch
gcov-architecture-specific-compile-flag-adjustments.patch
BAD

I can not bisect between the last two due to build error. Config is attached.

Mariusz


Attachments:
(No filename) (2.62 kB)
config-2.6.26-rc5-mm1 (44.90 kB)
Download all attachments

2008-06-10 05:03:40

by Andrew Morton

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1

On Tue, 10 Jun 2008 06:57:02 +0200 Mariusz Kozlowski <[email protected]> wrote:

> Witam,
>
> > On Mon, 9 Jun 2008 21:14:54 +0200
> > Mariusz Kozlowski <[email protected]> wrote:
> >
> > > Hello Balbir,
> > >
> > > > Andrew Morton wrote:
> > > > > Temporarily at
> > > > >
> > > > > http://userweb.kernel.org/~akpm/2.6.26-rc5-mm1/
> > > > >
> > > >
> > > > I've hit a segfault, the last few lines on my console are
> > > >
> > > >
> > > > Testing -fstack-protector-all feature
> > > > registered taskstats version 1
> > > > debug: unmapping init memory ffffffff80c03000..ffffffff80dd8000
> > > > init[1]: segfault at 7fff701fe880 ip 7fff701fee5e sp 7fff7006e6d0 error 7
> > > >
> > > > With absolutely no stack trace. I'll dig deeper.
> > >
> > > Hey, I see something similar and I actually have a stack trace. Here it goes:
> > >
> > > bash[498] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fffa3d010f0 error 7
> > > init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fff9e97f640 error 7
> > > init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp 7fff9e97eed0 error 7
> > > Kernel panic - not syncing: Attemted to kill init!
> > > Pid 1, comm: init Not tainted 2.6.26-rc5-mm1 #1
> > >
> > > Call Trace:
> > > [<ffffffff80254632>] panic+0xe2/0x260
> > > [<ffffffff802fa8ba>] ? __slab_free+0x10a/0x630
> > > [<ffffffff80265a8e>] ? __sigqueue_free+0x5e/0x70
> > > [<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
> > > [<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
> > > [<ffffffff80259b54>] do_exit+0xb84/0xc30
> > > [<ffffffff80259c5a>] do_group_exit+0x5a/0x110
> > > [<ffffffff8026a3b5>] get_signal_to_deliver+0x2c5/0x620
> > > [<ffffffff8020bb3b>] do_notify_resume+0x11b/0xd10
> > > [<ffffffff8028da5b>] ? trace_hardirqs_on+0x1b/0x30
> > > [<ffffffff805cd0f3>] ? _spin_unlock_irqrestore+0x93/0x130
> > > [<ffffffff8026865c>] ? force_sig_info+0x10c/0x130
> > > [<ffffffff8022fb9c>] ? force_sig_info_fault+0x2c/0x40
> > > [<ffffffff802dd7dd>] ? print_vma_addr+0x10d/0x1d0
> > > [<ffffffff805cbb67>] ? trace_hardirqs_on_thunk+0x3a/0x3f
> > > [<ffffffff8028d8da>] ? trace_hardirqs_on_caller+0x15a/0x2c0
> > > [<ffffffff8020d4c9>] retint_signal+0x46/0x8d
> > >
> > > This was copied manually so typos are possible.
> > >
> >
> > Thanks. Could someone send a config please? Or a bisection result ;)
>
> In my case it turns out to be gcov patches - in which I'm interested
> in to see (and play with) the tests coverage.
>
> #
> # gcov
> #
> kernel-call-constructors.patch
> kernel-introduce-gcc_version_lower-macro.patch
> seq_file-add-function-to-write-binary-data.patch
> GOOD
> gcov-add-gcov-profiling-infrastructure.patch
> GOOD
> gcov-create-links-to-gcda-files-in-build-directory.patch
> gcov-architecture-specific-compile-flag-adjustments.patch
> BAD
>
> I can not bisect between the last two due to build error. Config is attached.
>

(cc Peter)

2008-06-10 06:21:15

by Jiri Slaby

[permalink] [raw]
Subject: Re: sock lockup -> process in D state [Was: 2.6.26-rc5-mm1]

On 06/10/2008 01:01 AM, Andrew Morton wrote:
> On Tue, 10 Jun 2008 00:33:01 +0200
> Jiri Slaby <[email protected]> wrote:
>
>> On 06/09/2008 02:39 PM, Andrew Morton wrote:
>>> ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.26-rc5/2.6.26-rc5-mm1/
>> I don't know how to reproduce it so far, but posting anyway:
>>
>> httpd2-prefor D 00000000ffffffff 0 3697 2811
>> ffff810055bd7198 0000000000000046 ffff810055bd7160 ffff810055bd715c
>> ffffffff80728000 ffff810063896700 ffff81007d093380 ffff810063896980
>> 00000001781e1700 00000001005585a6 ffff810063896980 0000000000000600
>> Call Trace:
>> [<ffffffff8049d6fd>] lock_sock_nested+0x8d/0xd0
[...]
>
> Looks like it tried to go BUG then deadlocked. Didn't it print BUG
> stuff into the logs?
>
> And I'd guess that you hit the unlock_page() BUG (Subject: Re:
> 2.6.26-rc5-mm1: kernel BUG at mm/filemap.c:575!).

Yeah, you're right. I didn't notice it earlier, since 2 unsuccessful suspends
tainted logs with task stacks.

This is the first Oops. The same with httpd is in the logs too.

------------[ cut here ]------------
kernel BUG at /home/l/latest/xxx/mm/filemap.c:575!
invalid opcode: 0000 [1] SMP
last sysfs file: /sys/devices/virtual/net/tun0/statistics/collisions
CPU 0
Modules linked in: usbhid hid ohci1394 floppy ff_memless ieee1394 rtc_cmos evdev
[last unloaded: freq_table]
Pid: 27195, comm: find Not tainted 2.6.26-rc5-mm1_64 #417
RIP: 0010:[<ffffffff80277ec7>] [<ffffffff80277ec7>] unlock_page+0x17/0x40
RSP: 0018:ffff810059851618 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffe20000679b70 RCX: 0000000000000035
RDX: 0000000000000000 RSI: ffffe20000679b70 RDI: ffffe20000679b70
RBP: ffff810059851628 R08: db80000000000000 R09: e000000000000000
R10: ffffe20000a494c8 R11: ffff81002f05fa50 R12: ffffe20000679b98
R13: ffff810059851898 R14: ffff8100598519b8 R15: 0000000000000000
FS: 00007fa7478a56f0(0000) GS:ffffffff806d2300(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f62ec2fe000 CR3: 00000000591ac000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process find (pid: 27195, threadinfo ffff810059850000, task ffff810078346700)
Stack: ffff810059851628 ffffe20000679b70 ffff810059851768 ffffffff8028386d
ffff810059851728 ffff8100598516e8 ffff810059851658 0000000000000000
0000001400000000 0000000000000002 0000000000000002 0000000000000001
Call Trace:
[<ffffffff8028386d>] shrink_page_list+0x2fd/0x720
[<ffffffff80282ad3>] ? isolate_pages_global+0x1c3/0x270
[<ffffffff80283ed0>] shrink_list+0x240/0x5e0
[<ffffffff802844c3>] shrink_zone+0x253/0x330
[<ffffffff80285441>] try_to_free_pages+0x251/0x3e0
[<ffffffff80282910>] ? isolate_pages_global+0x0/0x270
[<ffffffff8027e8ff>] __alloc_pages_internal+0x20f/0x4e0
[<ffffffff802a0e04>] __slab_alloc+0x6d4/0x6f0
[<ffffffff80308a45>] ? ext3_alloc_inode+0x15/0x40
[<ffffffff802a1165>] kmem_cache_alloc+0x95/0xa0
[<ffffffff80308a45>] ext3_alloc_inode+0x15/0x40
[<ffffffff802bbdac>] alloc_inode+0x1c/0x1b0
[<ffffffff802bbfb0>] iget_locked+0x70/0x170
[<ffffffff802ffd87>] ext3_iget+0x17/0x3f0
[<ffffffff80306cf8>] ext3_lookup+0xa8/0x100
[<ffffffff802ba6c3>] ? d_alloc+0x123/0x1b0
[<ffffffff802adb36>] do_lookup+0x1c6/0x220
[<ffffffff802af4bb>] __link_path_walk+0x37b/0x1030
[<ffffffff8029ee95>] ? check_object+0x265/0x270
[<ffffffff8029e6c0>] ? init_object+0x50/0x90
[<ffffffff802b01d6>] path_walk+0x66/0xd0
[<ffffffff802b0492>] do_path_lookup+0xa2/0x240
[<ffffffff802b142c>] __user_walk_fd+0x4c/0x80
[<ffffffff802a89cb>] vfs_lstat_fd+0x2b/0x70
[<ffffffff802a8ba3>] ? cp_new_stat+0xe3/0xf0
[<ffffffff802c011a>] ? mntput_no_expire+0x2a/0x190
[<ffffffff802a8c0c>] sys_newfstatat+0x5c/0x80
[<ffffffff802a640d>] ? fput+0x1d/0x30
[<ffffffff802a2b9b>] ? filp_close+0x5b/0x90
[<ffffffff802a2c7d>] ? sys_close+0xad/0x100
[<ffffffff8020c42b>] system_call_after_swapgs+0x7b/0x80

Code: 1f 44 00 00 eb c5 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 53
48 89 fb 48 83 ec 08 f0 0f ba 37 00 19 c0 85 c0 75 04 <0f> 0b eb fe e8 f0 ee ff
ff 48 89 de 48 89 c7 31 d2 e8 c3 60 fd
RIP [<ffffffff80277ec7>] unlock_page+0x17/0x40
RSP <ffff810059851618>
---[ end trace 2a52a1962aabcbb2 ]---

2008-06-10 08:40:24

by Peter 1 Oberparleiter

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1

Andrew Morton <[email protected]> wrote on 10.06.2008 07:01:49:
> On Tue, 10 Jun 2008 06:57:02 +0200 Mariusz Kozlowski <m.
> [email protected]> wrote:
>
> > Witam,
> >
> > > On Mon, 9 Jun 2008 21:14:54 +0200
> > > Mariusz Kozlowski <[email protected]> wrote:
> > >
> > > > Hello Balbir,
> > > >
> > > > > Andrew Morton wrote:
> > > > > > Temporarily at
> > > > > >
> > > > > > http://userweb.kernel.org/~akpm/2.6.26-rc5-mm1/
> > > > > >
> > > > >
> > > > > I've hit a segfault, the last few lines on my console are
> > > > >
> > > > >
> > > > > Testing -fstack-protector-all feature
> > > > > registered taskstats version 1
> > > > > debug: unmapping init memory ffffffff80c03000..ffffffff80dd8000
> > > > > init[1]: segfault at 7fff701fe880 ip 7fff701fee5e sp
> 7fff7006e6d0 error 7
> > > > >
> > > > > With absolutely no stack trace. I'll dig deeper.
> > > >
> > > > Hey, I see something similar and I actually have a stack
> trace. Here it goes:
> > > >
> > > > bash[498] segfault at ffffffff80868b58 ip ffffffffff600412 sp
> 7fffa3d010f0 error 7
> > > > init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp
> 7fff9e97f640 error 7
> > > > init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp
> 7fff9e97eed0 error 7
> > > > Kernel panic - not syncing: Attemted to kill init!
> > > > Pid 1, comm: init Not tainted 2.6.26-rc5-mm1 #1
> > > >
> > > > Call Trace:
> > > > [<ffffffff80254632>] panic+0xe2/0x260
> > > > [<ffffffff802fa8ba>] ? __slab_free+0x10a/0x630
> > > > [<ffffffff80265a8e>] ? __sigqueue_free+0x5e/0x70
> > > > [<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
> > > > [<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
> > > > [<ffffffff80259b54>] do_exit+0xb84/0xc30
> > > > [<ffffffff80259c5a>] do_group_exit+0x5a/0x110
> > > > [<ffffffff8026a3b5>] get_signal_to_deliver+0x2c5/0x620
> > > > [<ffffffff8020bb3b>] do_notify_resume+0x11b/0xd10
> > > > [<ffffffff8028da5b>] ? trace_hardirqs_on+0x1b/0x30
> > > > [<ffffffff805cd0f3>] ? _spin_unlock_irqrestore+0x93/0x130
> > > > [<ffffffff8026865c>] ? force_sig_info+0x10c/0x130
> > > > [<ffffffff8022fb9c>] ? force_sig_info_fault+0x2c/0x40
> > > > [<ffffffff802dd7dd>] ? print_vma_addr+0x10d/0x1d0
> > > > [<ffffffff805cbb67>] ? trace_hardirqs_on_thunk+0x3a/0x3f
> > > > [<ffffffff8028d8da>] ? trace_hardirqs_on_caller+0x15a/0x2c0
> > > > [<ffffffff8020d4c9>] retint_signal+0x46/0x8d
> > > >
> > > > This was copied manually so typos are possible.
> > > >
> > >
> > > Thanks. Could someone send a config please? Or a bisection result
;)
> >
> > In my case it turns out to be gcov patches - in which I'm interested
> > in to see (and play with) the tests coverage.
> >
> > #
> > # gcov
> > #
> > kernel-call-constructors.patch
> > kernel-introduce-gcc_version_lower-macro.patch
> > seq_file-add-function-to-write-binary-data.patch
> > GOOD
> > gcov-add-gcov-profiling-infrastructure.patch
> > GOOD
> > gcov-create-links-to-gcda-files-in-build-directory.patch
> > gcov-architecture-specific-compile-flag-adjustments.patch
> > BAD
> >
> > I can not bisect between the last two due to build error. Config
> is attached.
> >
>
> (cc Peter)

Thanks for the report. These look like the "known architecture problems"
that I've hinted at in the gcov announcement post (I'm assuming this is
x86_64 as I've seem similar reports in the past).

Possible reasons:

1) initrd overwrites kernel: When kernel and initrd are loaded to static
addresses, the oversized gcov kernel may overlap with the initrd load
address. Solution: move initrd loading address.

2) out-of-memory: Kernel plus profiling code may just not fit into a
minimal memory configuration any more. Solution: add memory.

3) write-protection of kernel code: gcc keeps profiling code and data
close together in the .text section. Solution: any mechanism that
protects .text against writes should be disabled when running a
profiled kernel.

4) as of yet undiscovered incompatibilities between arch-dependent code
and gcc's -fprofile-arcs option. Examples would be:

* code which is run before memory access preparations were made
* hard coded section sizes
* relative address displacements which are out of range

Unfortunately I neither have access to a machine nor the skill to debug
4) myself, so if 1)-3) can be ruled out, I'd like to ask for more help
on this one:

First off, someone needs to track down the offending file(s). This is
done by putting a line containing "GCOV := n" in all Makefiles below
arch/x86_64 (or go one step further back and set
CONFIG_GCOV_PROFILE_ALL=n). If my assumption is correct, then the
kernel should boot fine afterwards. In that case, remove the lines
again one-by-one, while compiling and booting after each change. If the
problem can be narrowed down to a single Makefile, replace the single
"GCOV := n" line with multiple "GCOV_file.o := n" lines, one for each
generated object file. Then again, same approach as before: remove
those lines, compile and boot until it breaks. Finally post your
results.

At this point we would need someone with x86_64 arch skills to look at
the file and find out why this code is broken with "-fprofile-arcs"
enabled (on s390 we discovered at least one actual code bug this way,
so the analysis might just be of general use). Alternatively we can
just keep these files from being profiled.


Regards,
Peter

2008-06-10 12:24:24

by Kamalesh Babulal

[permalink] [raw]
Subject: Re: [BUG] 2.6.26-rc5-mm1- kernel BUG at arch/x86/kernel/io_apic_64.c:355!

Andrew Morton wrote:
> On Mon, 09 Jun 2008 23:01:36 +0530
> Kamalesh Babulal <[email protected]> wrote:
>
>> Hi Andrew,
>>
>> The 2.6.26-rc5-mm1 kernel panics while bootup on 32 way, x86_64 machine.
>> passing noapic as the command line parameter, boots up
>> the machine fine.
>>
>> kernel BUG at arch/x86/kernel/io_apic_64.c:355!
>> invalid opcode: 0000 [1] SMP
>> last sysfs file:
>> CPU 24
>> Modules linked in:
>> Pid: 1, comm: swapper Not tainted 2.6.26-rc5-mm1-autotest #1
>> RIP: 0010:[<ffffffff8021b9da>] [<ffffffff8021b9da>] add_pin_to_irq+0x7a/0x90
>> RSP: 0018:ffff81061e4cbb60 EFLAGS: 00010216
>> RAX: 00000000000000f0 RBX: 00000000000000f0 RCX: 0000000000000001
>> RDX: 0000000000000018 RSI: 0000000000000006 RDI: 00000000000000f0
>> RBP: 0000000000000006 R08: 0000000000000018 R09: 0000000000000006
>> R10: 0000000000000008 R11: ffffffff803948e6 R12: 0000000000000001
>> R13: 0000000000000001 R14: 0000000000000018 R15: ffff81061e4cbc04
>> FS: 0000000000000000(0000) GS:ffff810bfe7be5c0(0000) knlGS:0000000000000000
>> CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
>> CR2: 0000000000000000 CR3: 0000000000201000 CR4: 00000000000006e0
>> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
>> DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
>> Process swapper (pid: 1, threadinfo ffff81061e4ca000, task ffff81032e4b96d0)
>> Stack: 0000000000000006 ffffffff8021ba6e 00000000000000f0 0000000000000001
>> 0000000000000000 0000000000000000 ffff81061e4cbc00 ffffffff80218991
>> 00000000000000f0 0000000000000000 0000000000000001 ffffffff80218a1a
>> Call Trace:
>> [<ffffffff8021ba6e>] io_apic_set_pci_routing+0x7e/0xb0
>> [<ffffffff80218991>] mp_register_gsi+0xb1/0xd0
>> [<ffffffff80218a1a>] acpi_register_gsi+0x6a/0x70
>> [<ffffffff80394b20>] acpi_pci_irq_enable+0x14f/0x220
>> [<ffffffff803948e6>] acpi_pci_allocate_irq+0x0/0x4c
>> [<ffffffff8036e14a>] do_pci_enable_device+0x4a/0x70
>> [<ffffffff8036e1c1>] __pci_enable_device_flags+0x51/0x60
>> [<ffffffff804f1608>] tg3_init_one+0x58/0x1640
>> [<ffffffff80229790>] default_wake_function+0x0/0x10
>> [<ffffffff8022e942>] set_cpus_allowed_ptr+0xc2/0xf0
>> [<ffffffff803703b7>] pci_device_probe+0xe7/0x130
>> [<ffffffff803c38b6>] driver_probe_device+0x96/0x1a0
>> [<ffffffff803c3a49>] __driver_attach+0x89/0x90
>> [<ffffffff803c39c0>] __driver_attach+0x0/0x90
>> [<ffffffff803c2dbd>] bus_for_each_dev+0x4d/0x80
>> [<ffffffff8028f708>] kmem_cache_alloc+0xc8/0xf0
>> [<ffffffff803c341e>] bus_add_driver+0xae/0x220
>> [<ffffffff803c3cd6>] driver_register+0x56/0x130
>> [<ffffffff80370678>] __pci_register_driver+0x68/0xb0
>> [<ffffffff806e5060>] tg3_init+0x0/0x20
>> [<ffffffff806c8a63>] kernel_init+0x153/0x320
>> [<ffffffff8020c378>] child_rip+0xa/0x12
>> [<ffffffff806c8910>] kernel_init+0x0/0x320
>> [<ffffffff8020c36e>] child_rip+0x0/0x12
>>
>>
>> Code: 89 05 27 88 43 00 7f 29 48 0f bf c1 48 8d 14 00 48 c1 e0 03 48 29 d0 48 8d 90 00 44 74 80 66 89 32 66 44 89 42 02 48 83 c4 08 c3 <0f> 0b eb fe 66 90 48 c7 c7 08 7d 5e 80 31 c0 e8 72 7b 01 00 66
>> RIP [<ffffffff8021b9da>] add_pin_to_irq+0x7a/0x90
>> RSP <ffff81061e4cbb60>
>> ---[ end trace 5a53b6247c28d358 ]---
>
> Here:
>
> static void add_pin_to_irq(unsigned int irq, int apic, int pin)
> {
> static int first_free_entry = NR_IRQS;
> struct irq_pin_list *entry = irq_2_pin + irq;
>
> BUG_ON(irq >= NR_IRQS);
>
>
> There are massive changes to tg3, massive changes in the relevant x86
> ACPI code and massive changes everywhere else.
>
> So I don't have a clue who broke it, but it wasn't me!
>
> You're testing linux-next, aren't you. Did you test the June 6 tree,
> upon which 2.6.26-rc5-mm1 was based?
>

This panic was seen in linux-next tree of may 19/20/21/22/23 kernels
and was reported (http://lkml.org/lkml/2008/5/21/285). It was not visible
in any June linux-next kernels. I will try and bisect the panic.

--
Thanks & Regards,
Kamalesh Babulal,
Linux Technology Center,
IBM, ISTL.

2008-06-11 11:51:42

by David Vrabel

[permalink] [raw]
Subject: [patch] UWB: make UWB selectable on all archs with USB support

Byron Bradley wrote:
> I'm getting the error below when compiling for ARM (Marvell Orion 5x) but
> having trouble working out exacty why. It looks like it isn't selecting
> any of the CONFIG_UWB* options which USB_WHCI_HCD should select. Config is
> attached.

ARM (and some other architectures) don't use drivers/Kconfig. This
patch enables UWB on all these architectures that have USB support.

David
--
David Vrabel, Senior Software Engineer, Drivers
CSR, Churchill House, Cambridge Business Park, Tel: +44 (0)1223 692562
Cowley Road, Cambridge, CB4 0WZ http://www.csr.com/


Attachments:
uwb-arch-source-drivers-uwb-Kconfig.patch (1.86 kB)

2008-06-11 22:26:26

by Byron Bradley

[permalink] [raw]
Subject: Re: [patch] UWB: make UWB selectable on all archs with USB support

On Wed, Jun 11, 2008 at 12:04 PM, David Vrabel <[email protected]> wrote:
> Byron Bradley wrote:
>> I'm getting the error below when compiling for ARM (Marvell Orion 5x) but
>> having trouble working out exacty why. It looks like it isn't selecting
>> any of the CONFIG_UWB* options which USB_WHCI_HCD should select. Config is
>> attached.
>
> ARM (and some other architectures) don't use drivers/Kconfig.

Thanks David, I didn't realise that. No compilation problems now.

Cheers,

--
Byron Bradley

2008-06-15 17:16:54

by Kamalesh Babulal

[permalink] [raw]
Subject: Re: [BUG] 2.6.26-rc5-mm1- kernel BUG at arch/x86/kernel/io_apic_64.c:355!

Kamalesh Babulal wrote:
> Andrew Morton wrote:
>> On Mon, 09 Jun 2008 23:01:36 +0530
>> Kamalesh Babulal <[email protected]> wrote:
>>
>>> Hi Andrew,
>>>
>>> The 2.6.26-rc5-mm1 kernel panics while bootup on 32 way, x86_64 machine.
>>> passing noapic as the command line parameter, boots up
>>> the machine fine.
>>>
>>> kernel BUG at arch/x86/kernel/io_apic_64.c:355!
>>> invalid opcode: 0000 [1] SMP
>>> last sysfs file:
>>> CPU 24
>>> Modules linked in:
>>> Pid: 1, comm: swapper Not tainted 2.6.26-rc5-mm1-autotest #1
>>> RIP: 0010:[<ffffffff8021b9da>] [<ffffffff8021b9da>] add_pin_to_irq+0x7a/0x90
>>> RSP: 0018:ffff81061e4cbb60 EFLAGS: 00010216
>>> RAX: 00000000000000f0 RBX: 00000000000000f0 RCX: 0000000000000001
>>> RDX: 0000000000000018 RSI: 0000000000000006 RDI: 00000000000000f0
>>> RBP: 0000000000000006 R08: 0000000000000018 R09: 0000000000000006
>>> R10: 0000000000000008 R11: ffffffff803948e6 R12: 0000000000000001
>>> R13: 0000000000000001 R14: 0000000000000018 R15: ffff81061e4cbc04
>>> FS: 0000000000000000(0000) GS:ffff810bfe7be5c0(0000) knlGS:0000000000000000
>>> CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
>>> CR2: 0000000000000000 CR3: 0000000000201000 CR4: 00000000000006e0
>>> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
>>> DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
>>> Process swapper (pid: 1, threadinfo ffff81061e4ca000, task ffff81032e4b96d0)
>>> Stack: 0000000000000006 ffffffff8021ba6e 00000000000000f0 0000000000000001
>>> 0000000000000000 0000000000000000 ffff81061e4cbc00 ffffffff80218991
>>> 00000000000000f0 0000000000000000 0000000000000001 ffffffff80218a1a
>>> Call Trace:
>>> [<ffffffff8021ba6e>] io_apic_set_pci_routing+0x7e/0xb0
>>> [<ffffffff80218991>] mp_register_gsi+0xb1/0xd0
>>> [<ffffffff80218a1a>] acpi_register_gsi+0x6a/0x70
>>> [<ffffffff80394b20>] acpi_pci_irq_enable+0x14f/0x220
>>> [<ffffffff803948e6>] acpi_pci_allocate_irq+0x0/0x4c
>>> [<ffffffff8036e14a>] do_pci_enable_device+0x4a/0x70
>>> [<ffffffff8036e1c1>] __pci_enable_device_flags+0x51/0x60
>>> [<ffffffff804f1608>] tg3_init_one+0x58/0x1640
>>> [<ffffffff80229790>] default_wake_function+0x0/0x10
>>> [<ffffffff8022e942>] set_cpus_allowed_ptr+0xc2/0xf0
>>> [<ffffffff803703b7>] pci_device_probe+0xe7/0x130
>>> [<ffffffff803c38b6>] driver_probe_device+0x96/0x1a0
>>> [<ffffffff803c3a49>] __driver_attach+0x89/0x90
>>> [<ffffffff803c39c0>] __driver_attach+0x0/0x90
>>> [<ffffffff803c2dbd>] bus_for_each_dev+0x4d/0x80
>>> [<ffffffff8028f708>] kmem_cache_alloc+0xc8/0xf0
>>> [<ffffffff803c341e>] bus_add_driver+0xae/0x220
>>> [<ffffffff803c3cd6>] driver_register+0x56/0x130
>>> [<ffffffff80370678>] __pci_register_driver+0x68/0xb0
>>> [<ffffffff806e5060>] tg3_init+0x0/0x20
>>> [<ffffffff806c8a63>] kernel_init+0x153/0x320
>>> [<ffffffff8020c378>] child_rip+0xa/0x12
>>> [<ffffffff806c8910>] kernel_init+0x0/0x320
>>> [<ffffffff8020c36e>] child_rip+0x0/0x12
>>>
>>>
>>> Code: 89 05 27 88 43 00 7f 29 48 0f bf c1 48 8d 14 00 48 c1 e0 03 48 29 d0 48 8d 90 00 44 74 80 66 89 32 66 44 89 42 02 48 83 c4 08 c3 <0f> 0b eb fe 66 90 48 c7 c7 08 7d 5e 80 31 c0 e8 72 7b 01 00 66
>>> RIP [<ffffffff8021b9da>] add_pin_to_irq+0x7a/0x90
>>> RSP <ffff81061e4cbb60>
>>> ---[ end trace 5a53b6247c28d358 ]---
>> Here:
>>
>> static void add_pin_to_irq(unsigned int irq, int apic, int pin)
>> {
>> static int first_free_entry = NR_IRQS;
>> struct irq_pin_list *entry = irq_2_pin + irq;
>>
>> BUG_ON(irq >= NR_IRQS);
>>
>>
>> There are massive changes to tg3, massive changes in the relevant x86
>> ACPI code and massive changes everywhere else.
>>
>> So I don't have a clue who broke it, but it wasn't me!
>>
>> You're testing linux-next, aren't you. Did you test the June 6 tree,
>> upon which 2.6.26-rc5-mm1 was based?
>>
>
> This panic was seen in linux-next tree of may 19/20/21/22/23 kernels
> and was reported (http://lkml.org/lkml/2008/5/21/285). It was not visible
> in any June linux-next kernels. I will try and bisect the panic.

After bisecting, following commit seems to be causing the kernel panic.

9b7dc567d03d74a1fbae84e88949b6a60d922d82 is first bad commit
commit 9b7dc567d03d74a1fbae84e88949b6a60d922d82
Author: Thomas Gleixner <[email protected]>
Date: Fri May 2 20:10:09 2008 +0200

x86: unify interrupt vector defines

The interrupt vector defines are copied 4 times around with minimal
differences. Move them all into asm-x86/irq_vectors.h

Signed-off-by: Thomas Gleixner <[email protected]>
Signed-off-by: Ingo Molnar <[email protected]>

:040000 040000 939b99bbeaaab47d126b61688d95b028f45d2276 a44936fcb93cda9222688f0cf3cbf41af962b061 M arch
:040000 040000 bf113a910c6677e61811eb933f171ce9efcbff48 f7032a47ddb8b802278bdbba5026356c18e6d96f M include



--
Thanks & Regards,
Kamalesh Babulal,
Linux Technology Center,
IBM, ISTL.

2008-06-17 22:26:38

by Mariusz Kozlowski

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1

Hello,

> Andrew Morton <[email protected]> wrote on 10.06.2008 07:01:49:
> > On Tue, 10 Jun 2008 06:57:02 +0200 Mariusz Kozlowski <m.
> > [email protected]> wrote:
> >
> > > Witam,
> > >
> > > > On Mon, 9 Jun 2008 21:14:54 +0200
> > > > Mariusz Kozlowski <[email protected]> wrote:
> > > >
> > > > > Hello Balbir,
> > > > >
> > > > > > Andrew Morton wrote:
> > > > > > > Temporarily at
> > > > > > >
> > > > > > > http://userweb.kernel.org/~akpm/2.6.26-rc5-mm1/
> > > > > > >
> > > > > >
> > > > > > I've hit a segfault, the last few lines on my console are
> > > > > >
> > > > > >
> > > > > > Testing -fstack-protector-all feature
> > > > > > registered taskstats version 1
> > > > > > debug: unmapping init memory ffffffff80c03000..ffffffff80dd8000
> > > > > > init[1]: segfault at 7fff701fe880 ip 7fff701fee5e sp
> > 7fff7006e6d0 error 7
> > > > > >
> > > > > > With absolutely no stack trace. I'll dig deeper.
> > > > >
> > > > > Hey, I see something similar and I actually have a stack
> > trace. Here it goes:
> > > > >
> > > > > bash[498] segfault at ffffffff80868b58 ip ffffffffff600412 sp
> > 7fffa3d010f0 error 7
> > > > > init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp
> > 7fff9e97f640 error 7
> > > > > init[1] segfault at ffffffff80868b58 ip ffffffffff600412 sp
> > 7fff9e97eed0 error 7
> > > > > Kernel panic - not syncing: Attemted to kill init!
> > > > > Pid 1, comm: init Not tainted 2.6.26-rc5-mm1 #1
> > > > >
> > > > > Call Trace:
> > > > > [<ffffffff80254632>] panic+0xe2/0x260
> > > > > [<ffffffff802fa8ba>] ? __slab_free+0x10a/0x630
> > > > > [<ffffffff80265a8e>] ? __sigqueue_free+0x5e/0x70
> > > > > [<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
> > > > > [<ffffffff802851eb>] ? trace_hardirqs_off+0x1b/0x30
> > > > > [<ffffffff80259b54>] do_exit+0xb84/0xc30
> > > > > [<ffffffff80259c5a>] do_group_exit+0x5a/0x110
> > > > > [<ffffffff8026a3b5>] get_signal_to_deliver+0x2c5/0x620
> > > > > [<ffffffff8020bb3b>] do_notify_resume+0x11b/0xd10
> > > > > [<ffffffff8028da5b>] ? trace_hardirqs_on+0x1b/0x30
> > > > > [<ffffffff805cd0f3>] ? _spin_unlock_irqrestore+0x93/0x130
> > > > > [<ffffffff8026865c>] ? force_sig_info+0x10c/0x130
> > > > > [<ffffffff8022fb9c>] ? force_sig_info_fault+0x2c/0x40
> > > > > [<ffffffff802dd7dd>] ? print_vma_addr+0x10d/0x1d0
> > > > > [<ffffffff805cbb67>] ? trace_hardirqs_on_thunk+0x3a/0x3f
> > > > > [<ffffffff8028d8da>] ? trace_hardirqs_on_caller+0x15a/0x2c0
> > > > > [<ffffffff8020d4c9>] retint_signal+0x46/0x8d
> > > > >
> > > > > This was copied manually so typos are possible.
> > > > >
> > > >
> > > > Thanks. Could someone send a config please? Or a bisection result
> ;)
> > >
> > > In my case it turns out to be gcov patches - in which I'm interested
> > > in to see (and play with) the tests coverage.
> > >
> > > #
> > > # gcov
> > > #
> > > kernel-call-constructors.patch
> > > kernel-introduce-gcc_version_lower-macro.patch
> > > seq_file-add-function-to-write-binary-data.patch
> > > GOOD
> > > gcov-add-gcov-profiling-infrastructure.patch
> > > GOOD
> > > gcov-create-links-to-gcda-files-in-build-directory.patch
> > > gcov-architecture-specific-compile-flag-adjustments.patch
> > > BAD
> > >
> > > I can not bisect between the last two due to build error. Config
> > is attached.
> > >
> >
> > (cc Peter)

Sorry for the delay. Unfortunately I don't have as much time for this
as I'd like to.

> Thanks for the report. These look like the "known architecture problems"
> that I've hinted at in the gcov announcement post (I'm assuming this is
> x86_64 as I've seem similar reports in the past).
>
> Possible reasons:
>
> 1) initrd overwrites kernel: When kernel and initrd are loaded to static
> addresses, the oversized gcov kernel may overlap with the initrd load
> address. Solution: move initrd loading address.

Not using initrd.

> 2) out-of-memory: Kernel plus profiling code may just not fit into a
> minimal memory configuration any more. Solution: add memory.

2G is ok I assume.

> 3) write-protection of kernel code: gcc keeps profiling code and data
> close together in the .text section. Solution: any mechanism that
> protects .text against writes should be disabled when running a
> profiled kernel.

Not using it.

> 4) as of yet undiscovered incompatibilities between arch-dependent code
> and gcc's -fprofile-arcs option. Examples would be:
>
> * code which is run before memory access preparations were made
> * hard coded section sizes
> * relative address displacements which are out of range
>
> Unfortunately I neither have access to a machine nor the skill to debug
> 4) myself, so if 1)-3) can be ruled out,

Yes they can be ruled out.

> I'd like to ask for more help
> on this one:
>
> First off, someone needs to track down the offending file(s). This is
> done by putting a line containing "GCOV := n" in all Makefiles below
> arch/x86_64 (or go one step further back and set
> CONFIG_GCOV_PROFILE_ALL=n). If my assumption is correct, then the
> kernel should boot fine afterwards. In that case, remove the lines
> again one-by-one, while compiling and booting after each change. If the
> problem can be narrowed down to a single Makefile, replace the single
> "GCOV := n" line with multiple "GCOV_file.o := n" lines, one for each
> generated object file. Then again, same approach as before: remove
> those lines, compile and boot until it breaks. Finally post your
> results.

After a few hours and tons of reboots I narrowed it down to
arch/x86/kernel/Makefile:

a) works
obj-y += tsc_$(BITS).o io_delay.o rtc.o
GCOV_tsc_$(BITS).o := n
#GCOV_io_delay.o := n
#GCOV_rtc.o := n

b) doesn't work
obj-y += tsc_$(BITS).o io_delay.o rtc.o
#GCOV_tsc_$(BITS).o := n
#GCOV_io_delay.o := n
#GCOV_rtc.o := n

and that points to arch/x86/kernel/tsc_64.c

> At this point we would need someone with x86_64 arch skills to look at
> the file and find out why this code is broken with "-fprofile-arcs"
> enabled (on s390 we discovered at least one actual code bug this way,
> so the analysis might just be of general use). Alternatively we can
> just keep these files from being profiled.


Mariusz

2008-06-18 08:35:36

by Peter 1 Oberparleiter

[permalink] [raw]
Subject: Re: 2.6.26-rc5-mm1

Mariusz Kozlowski wrote:
> After a few hours and tons of reboots I narrowed it down to
> arch/x86/kernel/Makefile:
>
> a) works
> obj-y += tsc_$(BITS).o io_delay.o rtc.o
> GCOV_tsc_$(BITS).o := n
> #GCOV_io_delay.o := n
> #GCOV_rtc.o := n
>
> b) doesn't work
> obj-y += tsc_$(BITS).o io_delay.o rtc.o
> #GCOV_tsc_$(BITS).o := n
> #GCOV_io_delay.o := n
> #GCOV_rtc.o := n
>
> and that points to arch/x86/kernel/tsc_64.c

Excellent work!

I had a quick look at that file and couldn't identify any obvious reason
(for a non-x84 developer) why it shouldn't work with -fprofile-arcs.
There are some comments in the corresponding Makefile though that
indicate that tsc_64.o is a bit picky with regards to CFLAGS (no -pg,
-fno-stack-protector) so I think it's safe to simply exclude those
files from profiling.

Based on your findings, the following patch should be applied to -mm.
Thanks again for your effort.

--
[PATCH] gcov: fix run-time error on x86_64

From: Peter Oberparleiter <[email protected]>

Disable profiling of tsc_$(BITS).o to fix a run-time error when using
CONFIG_GCOV_PROFILE_ALL on x86_64:

bash[498] segfault at ffffffff80868b58 ip ffffffffff600412
sp 7fffa3d010f0 error 7
init[1] segfault at ffffffff80868b58 ip ffffffffff600412
sp 7fff9e97f640 error 7
init[1] segfault at ffffffff80868b58 ip ffffffffff600412
sp 7fff9e97eed0 error 7
Kernel panic - not syncing: Attemted to kill init!
Pid 1, comm: init Not tainted 2.6.26-rc5-mm1 #1

[email protected] wrote:
> After a few hours and tons of reboots I narrowed it down to
> arch/x86/kernel/Makefile:
>
> a) works
> obj-y += tsc_$(BITS).o io_delay.o rtc.o
> GCOV_tsc_$(BITS).o := n
> #GCOV_io_delay.o := n
> #GCOV_rtc.o := n
>
> b) doesn't work
> obj-y += tsc_$(BITS).o io_delay.o rtc.o
> #GCOV_tsc_$(BITS).o := n
> #GCOV_io_delay.o := n
> #GCOV_rtc.o := n
>
> and that points to arch/x86/kernel/tsc_64.c

Reported-by: Mariusz Kozlowski <[email protected]>
Reported-by: Balbir Singh <[email protected]>
Signed-off-by: Peter Oberparleiter <[email protected]>

---
arch/x86/kernel/Makefile | 3 +++
1 file changed, 3 insertions(+)

Index: linux-2.6.26-rc5-mm3/arch/x86/kernel/Makefile
===================================================================
--- linux-2.6.26-rc5-mm3.orig/arch/x86/kernel/Makefile
+++ linux-2.6.26-rc5-mm3/arch/x86/kernel/Makefile
@@ -13,6 +13,9 @@ CFLAGS_REMOVE_tsc_32.o = -pg
CFLAGS_REMOVE_rtc.o = -pg
endif

+GCOV_tsc_32.o := n
+GCOV_tsc_64.o := n
+
#
# vsyscalls (which work on the user stack) should have
# no stack-protector checks: